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FOREWORD 


This report covers those activities conducted under Study 2.3, System 
Cost/Performance Analysis, under NASA Contract No. NASW-2472 from 
1 September 1972 through 31 August 1973. The Aerospace Corporation Task 
Manager was T. Kazangey. The NASA Technical Director was R. R. Carley. 
The NASA review team consisted of the following persons: C. M. Akridge, 

W. S. Rutledge, G. E. Mosakowski, D. B. Clemens, H. Mandell, R. W. Abel, 
T. Campbell, and W. Little. 

The author acknowledges with graditude the many individuals at The 
Aerospace Corporation who contributed to this effort. 
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ABSTRACT 


The principal objective of this task was to identify and quantify the 
relationships between performance, safety, cost, and schedule parameters 
m support of an overall effort to generate program models and methodology 
that provide insight into the effect of changes in specific system functional 
requirements on a total space vehicle program. 

A first step in the development of such a methodology was to use a 
specific space vehicle system, the attitude control system (ACS). A modeling 
methodology was selected that develops a consistent set of quantitative 
relationships among performance, safety, cost, and schedule, based on the 
characteristics of the components utilized in candidate mechanisms. These 
descriptive equations were developed for a three-axis, earth -pointing, mass 
expulsion ACS. A data base describing typical candidate ACS components 

was implemented, along with a computer program to perform sample 
calculations. 

This approach implemented on a computer is capable of determining 
the effect of a change in functional requirements to the ACS mechanization 
and the resulting cost and schedule. By a simple extension of this modeling 
methodology to the other systems in a space vehicle, a complete space 
vehicle model can be developed. 

The methodology development began with a review of performance 
models, cost models, and data bases in order to determine their utility for 
this task. The results of the review revealed many costing methodologies, 
with the extremes being the -dollar per kilogram- and -cannot be done with- 
out designing the system first- approaches. The modeling approaches 
reviewed did not provide quantitative relationships between the performance, 
safety, cost, and schedule parameters of the particular system studied. In ' 



particular, none of the costing methodologies was capable of predicting the 
effect of a change in payload or mission functional requirements on the cost 
and schedule of the particular system studied. In addition to a lack of suitable 
costing methodologies, the review revealed a need for the detailed ACS com- 
ponent data. 

The quantitative relationships termed "aggregate equations" were written 
to describe the performance, safety, cost, and schedule of a specific ACS in 
terms of the components used in the specific ACS configuration. The equations 
were termed "aggregate equations, " because the independent variables that 
describe the ACS were "aggregated" into fundamental relationships to the 
parameters of performance, safety, cost, and schedule. For example, the 
aggregate equation for the pointing accuracy of a three-axis, mass expulsion, 
earth-pointing control system considers performance parameters such as 
attitude sensor noise and misalignment, gyroscope drift and misalignment, 
signal processor noise, and control system deadband. Each of these 
performance parameters is multiplied by a computed sensitivity coefficient 
and combined appropriately in a worst case and/or root-sum-square manner 
to form the aggregate equation for the pointing accuracy of a three-axis, mass 
expulsion control system. Aggregate equations were developed for each of 
the parameters of performance, safety, cost, and schedule to form the set 
of quantitative descriptive equations for a single type of control system 
(three-axis, mass expulsion, earth-pointing). Other control system config- 
ul " a ^ ons ' e * &• > dual spin, require a different set of aggregate equations to 
define the performance, safety, cost, and schedule relationships. 

The modeling methodology developed begins with the description of the 
mission and payload functional requirements and, via a filtering technique, 
selects the most applicable control method (such as gravity gradient, mass 
expulsion control, momentum storage, or spin stabilization) that will satisfy 
all the mission and payload functional requirements. For each control 
method, a functional block diagram is drawn, depicting generically the type 
of components that will be used to mechanize the particular ACS. Using the 
selected functional block diagram, the aggregate equations for performance. 
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safety, cost, and schedule are written and incorporated into the computer 
program implementing the model. The specific components needed to 
mechanize the ACS are selected by the program, using the performance 
aggregate equations and the appropriate data base. The model proceeds by 
first accessing a data base consisting of all ACS components and choosing the 
cheapest ACS components, assuming a low- cost ACS is our objective. The 
characteristics of these components are used in the pointing aggregate equa>- 
tions to compute the pointing accuracy. If the computed system pointing 
accuracy does not meet or exceed the desired pointing accuracy, the program 
then selects the next least expensive component, assuming that more money 
buys better components. This process is iterated until the desired pointing 
accuracy requirement is met. The use of the aggregate equations and the 
data base accession were facilitated by programming the aggregate equa- 
tions on a digital computer in this study. This computer program is capable 
of examining many combinations of components and storing those hardware 
configurations that have met or exceeded the desired pointing accuracy 
requirement. 

The next step is to use the safety aggregate equations to evaluate those 
hardware configurations that have met or exceeded the desired pointing 
accuracy requirement. The safety considerations consist of failure rate, 
failure detection probability, and false alarm probability and hazard assess- 
ment (TNT equivalent and single -point failures *), The failure rate aggregate 
equation determines the level (and configuration) of redundancy (and com- 
ponent quality) necessary to satisfy the payload and mission reliability require 
ments. The failure detection and false alarm probability aggregate equations 
quantify the level of system monitoring (onboard or ground-based) needed to 
meet system success criteria. Those ACS hardware configurations that meet 
or exceed all the safety requirements are recorded by the computer program. 
The power, weight, volume, thermal specification, vibration specification, 
and ambient pressure specification for the selected hardware configurations 
are then computed using the appropriate aggregate equations. Thus, for a 

^ The model only considers these parameters conceptually. 
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given configuration, a set of applicable components is chosen (based, for 
example, on minimum cost or on schedule requirements) from the data base. 
This configuration satisfies all the performance and safety requirements. 
After the set of applicable components has been selected, the centralization 
of major components is considered. For example, should the space vehicle 
use a centralized power supply or separate power supplies for each sub- 
system? Also, the trade between centralized signal processing versus 
separate signal processing must be considered. Finally, the total ACS cost 
and schedule are predicted using the cost and schedule aggregate equations. 
This process may be iterated to meet cost or schedule requirements. One 
of the features of this aggregate equation approach is the ability to establish 
sensitivities to changes in functional requirements. One need only change 
the performance requirement (for example, pointing accuracy) and let the 
process iterate again to get new results. 

The aggregate equations are computerized so that many combinations 
of ACS components can be examined to determine the best ACS mechanization 
for a variety of tradeoff criteria in a short period of time. This allows the 
user to determine the sensitivity of cost and schedules to functional require- 
ments in a rapid manner, which is necessary in a proposal or preliminary 
design phase. A computerized model is adaptable to the changing needs of a 
program, since specific aggregate equations may be upgraded as a project 
progresses from its conceptual phase through the critical design phase. As 
increasingly definitive ACS configurations and data base material become 
available during the design phase, specific aggregate equations and data may 

be easily changed via computer algorithms to reflect the normal progression 
of the design process. 

In addition to the ACS, attention was directed to the power conditioning 
subsystem, the thermal control subsystem, and the ground support systems. 
A "first-cut" set of aggregate equations was developed for the power condi- 
tioning subsystem. The thermal control subsystem and the ground support 
systems were examined to identify the pertinent factors needed to develop a 
first- cut" set of aggregate equations. 
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CONCLUSIONS 


The principal objective of this task was to identify and quantify the 
interrelationships between and within the performance, safety, cost, and 
schedule parameters in support of an overall effort to generate program 
models and methodology that provide insight into the effect of changes in 
specific system functional requirements on the total vehicle program. So 
that this objective could be accomplished, a viable Cost/Performance Model 
methodology that identified and quantified these relationships via "aggregate 
equations" was developed for a specific space vehicle system, the attitude 
control system (ACS). This methodology is designed to be applicable to all 
phases of a project. As the design progresses, the model and the supporting 
data base may be updated with more definitive information. A sample case 
of the model was implemented on a CDC 7600 computer for a three -axis 
stabilized, earth-pointing, mass expulsion ACS. In its computerized form, 
the model provides the designer with an interactive capability. It allows the 
designer to input specific data on selected components and system require- 
ments and, by root- sum- square and/or worst case analyses, to select hard- 
ware configurations. 

The computer model aids the designer in evaluating trade studies 
and simplifies the achievement of a balanced system design, since the impact 
of changes in functional requirements (performance and safety) on the total 
vehicle program (cost and schedule) can be easily determined. . This model 
will also be useful for evaluating the effect of new technology or standardized 
components by making suitable entries in the data base representing proposed 
component characteristics. If this modeling methodology is extended to other 
systems in a space vehicle, a complete space vehicle model can be developed. 

Sample calculations were run for several performance and safety 
requirements, using a sample data base. For these restrictive cases, the 
model results are consistent with conventional cost- versus-weight cost 
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estimating relationships (CERs). At the same time, the model is capable 
of providing insight into the effect of other variables (e.g., reliability and 
power) on system cost; this capability is not available using conventional 
CERs. This model also emphasizes the fact that system-cost-versus- 
sy stem -weight relationships are discrete cost/weight points with significant 
gaps, rather than the continuous relationship implied by the data averaging 
approach of a conventional CER. 


The model presently provides a means of determining a unified 
estimate of performance, safety, cost, and schedule on a single type of ACS 
for the use of both performance and cost analysts. With refinement of some 
aggregate equations and extension to other ACS types, this model will be 
applicable to trade studies concerning most ACS requirements. Similarly, 
it can be applied to other space vehicle systems as the required aggregate* 
equations become available. If fully developed, the model will provide a 
single tool to determine a unified estimate of performance, safety, cost, 
and schedule for a vehicle that supports both cost and performance analyses. 
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RECOMMENDATIONS 


This task developed a Cost/Performance Model methodology through 
a consistent set of aggregate equations relating performance, safety, cost, 
and schedule parameters. A sample case was developed for a three-axis, 
earth-pointing, mass expulsion attitude control system (ACS) in an on-orbit 
operational mode. This approach, implemented on a computer, is capable 
of determining the effect of a change in functional requirements to the ACS 
mechanization and the resulting cost and schedule. If this modeling method- 
ology is extended to other systems in a space vehicle, a complete space 
vehicle model can be developed. Specific aggregate equations, such as the 
performance and safety aggregate equations, were developed to a greater 
level of detail than other aggregate equations. It is recommended that the 
aggregate equations developed during this study be "refined," especially for 
parameters such as power, weight, volume, specifications, cost, and 
schedules. For example, there is no relationship between the cost and 
schedule aggregate equations. Further development should be undertaken 
to include this interrelationship. The present safety equations compute 
hardware reliability and failure detection probability; however, further 
development and review of the approach is required to quantify failure modes 
and detection probability, based on component characteristics in the data 
base, as well as to combine these to an overall value for probability of 
successful operation of the ACS during the entire mission duration. 

Additional development is required to generalize the Cost/ 
Performance Model sample equations for the ACS. Specifically, aggregate 
equations should be developed for other control methods (i.e., gravity 
gradient, momentum storage, and spin- stabilized) and for other operational 
modes (i.e., acquisition and powered flight). Quantitative relationships must 
still be developed for component centralizations and propellant hazards. 
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This task has considered only one type of space vehicle system in 
detail. If a total vehicle program is to be generated, aggregate equations 
for remaining space vehicle systems and for support systems (e.g., ground 
support equipment, flight operations) must be written. The modeling method- 
ology has the capability of developing performance aggregate equations as 
either worst case and/or root-sum-square combinations. I n the sample cal- 
culations, however, only root- sum- square combinations were implemented. 
The equations should be generalized to also compute worst case performance. 
The validity of aggregate equations depends on the quantity and quality of 


component and system data. It is recommended that the development of the 
component data base to support a total vehicle model be continued. The pos- 
sibility of providing this data by having data collected for Resource Data Stor- 
age and Retrieval (REDSTAR) system at the component level should be investi- 
gated. It will be necessary, however, to have additional component data 
items such as accuracies, reliabilities, and failure detection capabilities 
added to the REDSTAR format. The data collected should be reviewed by 
both cost and performance analysts to ensure that the model outputs are 
satisfactory for evaluation of both performance and cost of a system. 

Alter the additional development recommended above, sample 
cases should be computed that can be compared with results from the vehi- 
cle synthesis model and the Space Transportation System cost-estimating 
relationships (CERs). Following validation, this model should be usable in 
conjunction with these models to provide better cost and schedule estimates. 

It is recommended that the fiscal year 1974 effort include extension 
the model to other space vehicle systems; improvement of the data base 
o e acceptable for both performance and cost analyses; testing of the 
capability of the model to predict space vehicle interrelationships; and a user 
review to evaluate the potential of the model to assist in programmatic 
change control such as configuration management 
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i. INTRODUCTION 


A. TASK OBJECTIVE 

As the space program matures into an applications industry, greater 
emphasis will be placed on improving the ability to predict the effect of pro- 
gram requirements on cost and schedules. Current advanced studies are 
estimating benefits for standardized subsystems and components, on-orbit 
servicing, and ground refurbishment of spacecraft, etc. Cost -estimating 
techniques that give greater insight earlier in the program cycle are required. 
As a step in this direction, this study was initiated to identify and quantify 
the interrelationships between and within the performance, safety, cost, and 
schedule parameters as delineated in Table 1-1. These data would then be 
used to support an overall NASA effort to generate program models and 
methodology that would provide the needed insight into the effect of changes 
in specific system functional requirements (performance and safety) on a 
total vehicle program (cost and schedule). 

B. STUDY APPROACH 

The initial planning of the task divided the effort into six subtasks. 

The effort began with two subtasks. The first, development of flow charts 
of the design process, included a literature search and the initial develop- 
ment of modeling methodology. The second subtask developed background 
information on other modeling methodologies and on data bases. The re- 
maining tasks included data development to collect properly formatted 
component data for sample calculations, refinement of the modeling methodo- 
logy, the calculation of a sample case, and the preliminary modeling of 
other related subsystems. 

The attitude control system (ACS) was selected as the first space 
vehicle system to be used in the development of a modeling methodology 
described by such quantitative relationships. So that an early assessment of 
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Table 1-1. Model Parameters 


1. 0. 0 

PERFORMANCE 


1. 1. 0 

Technical Characteristics 



1. 1. 1 
1. 1. 2 

System peculiar; (i. e. , no fewer than 



1. 1. 3 
1. 1. 4 

four items, no more than ten items) 


1. 2. 0 

Power 




1. 2. 1 

Average 



1.2.2 

Peak 


1. 3. 0 

Weight 



1. 4. 0 

Volume 



1. 5. 0 

Vibration Specification 



i. 5. 1 

Random (g rms) 



1. 5. 2 

Non-random 


1. 6. 0 

Temperature Specification 



1. 6 . 1 

Radiation 



1. 6.2 

Conduction 


1. 7. 0 

Ambient Pressure Specification 

2. 0. 0 

SAFETY 

AND HAZARDS 


2. 1. 0 

Failure 

As sessment 



2. 1. 1 

Failure rate 



2.1.2 

Number of single point failure 
locations 



2. 1. 3 

Number of dual point failure 
locations 


2. 2. 0 

Failure 

Detection Probability 


2. 3. 0 

False Alarm Probability 


2. 4. 0 

Hazard 

Potential 



2.4. 1 

Latent energy 



2.4.2 

Radiation energy 
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Table 1-1. Model Parameters (Continued) 


3. 0. 0 COST 


3.1.0 

Design and Development 


3. 1. 1 Engineering 

3. 1.2 Development 

3. 2. 0 

Build and Checkout 


3.2.1 Tooling 

3.2.2 Manufacturing 

3. 2. 3 Quality control 

3.2.4 Clerical 

3. 3. 0 

Test Hardware 

3.4.0 

Training and Simulation 

3. 5. 0 

Support for 10 to 15 Years in Service Life 

3. 6. 0 

Management 

4. 0, 0 SCHEDULE (Time for Completion) 

4.1.0 

Proposal 

4. 2. 0 

Preliminary Design and System Analysis 

4. 3. 0 

Subsystem Analysis, Design, and Bread- 
board Testing 

4. 4. 0 

Prototype Design, Fabrication, and Test 

4. 5. 0 

Subsystem Production Engineering, 
Fabrication, and Testing 

4. 6. 0 

System Integration and Test 

4. 7. 0 

Flight Test Phase (Flights 1 to 5) 

4. 8. 0 

Initial Operational Phase (Flights 6 to 2 0) 

4. 9. 0 

Operational Phase (Remaining Flights) 


1-3 



the modeling methodology could be obtained, the sample case was restricted 
to a single type of ACS to demonstrate the feasibility of the approach prior 
to a wider application. The actual modeling methodology selected for this 
study develops a consistent set of quantitative relationships among perfor- 
mance, safety, cost, and schedule, based on the characte ristics of the 
components utilized in candidate mechanisms. These descriptive equations 
were developed for a three -axis, earth-pointing, mass expulsion ACS. A 
data base describing typical candidate ACS components was developed, and 
sample calculations were performed on a digital computer. This approach, 
implemented on a computer, is capable of determining the effect of a 
change in functional requirements to the ACS mechanization and the resulting 
cost and schedule. If this modeling methodology is extended to other systems 
in a space vehicle, a complete space vehicle model can be developed. 

Section 1. C reviews the development of background information and 
the modeling techniques considered that ultimately led to the cost /performance 
methodology developed under Task 2. 3. 


C. 


BACKGROUND INFORMATION STUDY 


At the start of the study, a review of potentially applicable cost mod- 
eling techniques was conducted. Included in this model review were the SAMSO/ 
Aerospace cost-schedule models, the General Electric Co. design guide for 
ACS, the Honeywell cost analysis, the Resource Data Storage and Retrieval 
(REDSTAR) data base, and the Optimized Design Integration System (ODIN) 
and Integrated Programs for Aerospace Vehicles Design (IPAD) Programs. 

The following paragraphs present a brief description of the material reviewed. 

Several distinct SAMSO /Aerospace cost-schedule models were 
reviewed during the early stages of Task 2. 3. These models are discussed 
in some detail in Section 2. In general, the models all use a cost-estimating 
relationship (CER) approach to cost-out a specific type of system. Separate 
CERs are often used for each program phase, such as the design, develop- 
ment, test, and evaluation phase; first article production; and ongoing 
operations. In each CER, cost is related to some distinct physical parameter 
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such as weight or volume. Often a CER is developed using statistical least- 
squares regression on data obtained from previous programs; these "static" 
costs are distributed over time by a learning or improvement curve that 
takes into account reduced per-unit costs as production increases. In addi- 
tion, inflation factors are usually included to account for reduction in pur- 
chasing power per dollar with increasing time. Finally, scheduling models 
are defined as a function of time and may run from simple, straight-line 
spreads to skewed variations of the normal distribution curve. Various 
input and output formats are employed, with input requirements primarily 
set by the type of CERs used and with output formats determined by the level 
of output detail in the work breakdown structure (WBS) and by schedule 
resolution. 

In addition to the SAMSO /Aerospace models, other models and data 
bases were reviewed. These include a General Electric design guide for 
developing a satellite ACS, given mission requirements; the USAF 375 Series 
Manuals, which are structured along cost-accounting lines; and a Honeywell, 
Inc. cost analysis study. A portion of the Honeywell study consisted of a 
historical review of stabilization and control systems for Apollo, Gemini, 
and the F-104. An important conclusion of the Honeywell study was that an 
uncertain relationship exists between the weight of ACS space hardware and 
its cost. As mentioned previously, this relationship forms the basis of 
many CERs used by the space industry. 

Included in the development of background information were reviews 
of several approaches to data base formulation and management. The 
REDSTAR system was one of those considered. It was the result of a 1972 
fiscal year study, entitled Application of Engineering Cost Analysis, by 
Planning Research Corporation. 

The WBS used in REDSTAR is divided inconveniently for an ACS 
designer; it tends to scatter ACS elements through a number of categories. 
This lack of correspondence between the WBS and the attitude control function 
does not mean that REDSTAR is not applicable to cost/performance modeling. 
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However, a translation matrix, as developed in this study, would have to be 
used to interpret the WBS in a manner useful to a model that includes system 
performance as an integral part of its methodology. 

Several in-house data base systems used by The Aerospace Corpora- 
tion were also reviewed. Unfortunately, very little component data of the 
nature required for a cost/performance -oriented model of the type developed 
in this study were found. 

As the final task in development of background information, the 
ODIN and IPAD Programs were investigated. The ODIN integrates computer- 
implemented models used for various aspects of system design and provides 
an optimum systems engineering approach to overall vehicle design. The 
IPAD supports the engineering design team by implementing, as much as 
possible, the computation and data management aspects of the design process. 

Conceptually, the Cost/Performance Model could be one module of the ODIN 
or IPAD system. 


£>. MODELING APPROACHES 


In the conceptual stage of Task 2.3, effort was devoted to the initial 
formulation of an approach to cost/performance modeling. During this stage 
a number of methodologies were conceived and required evaluation. The 
following criteria were formulated to judge each concept in a complete and 
objective manner and were used to evaluate the utility of each approach: 

1* A P rime objective is to determine sensitivity of cost to changes 
in requirements. 6 


2 . 


3. 


4. 

5 . 


The modeling methodology must not impose a cumbersome 
reporting structure on the contractor. 

The modeling methodology must reflect costs from all 
p ases of development through operations. 

The approach taken should reflect current design practice and 
tradeoff procedures. 

The model should achieve a balanced total vehicle design. 

C °? S /^ er ^ n f life -cycle costs in terms of performance, 

safety, and schedule requirements. 
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In general, all modeling approaches considered can be subdivided 
into two basic categories. Bottom -up approaches, the first category, depend 
on development of a system design. Estimates of tasks, material costs, 
manpower requirements, and schedules are made at each identifiable level 
of system integration; total estimates are obtained by summing individual 
costs and schedules. 

Top-down models, the second category, are essentially the CER 
approach described previously. As CERs have been unsuccessful in meeting 
the prime criterion of determining cost sensitivity to program requirement 
changes, top-down approaches were judged unacceptable for a Cost/Perfor- 
mance Model. Further, it was thought that a model oriented from the bottom 
up could lead to fulfillment of the previously stated criteria. 

A model, called the "minimum" model, was hypothesized as a basis 
for development of a cost/performance methodology. The minimum model 
considered, but did not adequately quantify, the performance, safety, cost, 
and schedule of an ACS. The "minimum" model was later expanded and 
became the Cost/Pe rformance Model. Starting with functional payload 
requirements, a filter algorithm would be developed to determine an attitude 
control method to satisfy these requirements. Once the basic type of ACS, 
such as momentum storage, mass expulsion, or other applicable method, 
was determined, various design configurations would be considered. 

Several models were examined in attempts to implement the min- 
imum model. Details of two of these approaches and their applicability to a 
cost/performance modeling viewpoint are given in Section 3. 

E. COST /PERFORMANCE MODELING METHODOLOGY 

The modeling approaches reviewed did not provide quantitative 
relationships among the performance, safety, cost, and schedule parameters 
for an ACS. When both the top-down and bottom-up approaches were recon- 
sidered, it was decided that a Cost/Performance Model oriented from the 
bottom up could lead to a model employing quantitative expressions that would 
output performance and cost sensitivities. A set of basic equations, termed 



"aggregate equations, " was written to describe the performance, safety, 
cost, and schedule of the ACS in terms of the equipment used in a selected 
configuration. The equations were termed "aggregate equations, " because 
the independent variables describing the ACS were "aggregated" into funda- 
mental relationships to the elements of performance, safety, cost, and sched- 
ule, For example, the aggregate equation for the pointing accuracy of a 
three -axis ACS considers variables such as attitude sensor noise and mis- 
alignment, gyroscope drift and misalignment, signal processor noise, and 
control system deadband. Each of these variables is multiplied by a computed 
sensitivity coefficient and combined in a worst case and/or root-sum-square 
manner to form the aggregate equation for the ACS pointing accuracy. 

The Cost/Performance Model was developed using aggregate equations 
in conjunction with minimum model elements. The flow diagram from this 
model is shown in Figure 1-1. Starting with payload functional requirements, 
a filtering technique (search/sort/filter) is used to determine an attitude 
control method (such as a gravity gradient, mass expulsion control, momentum 
storage, or spin stabilization} that will satisfy the functional requirements. 

The selection of an attitude control method is made because each different 
ACS configuration has its own set of performance aggregate equations. Other 
relationships, such as the aggregate equations for safety, cost, weight, etc., 
remain unchanged or require only minor modifications, such as changing 
coefficients. Once a basic control method is determined, the type of equip- 
ment needed to mechanize the ACS can be selected by iteration. Accessing 
a data base consisting of all ACS components suitable for this control method, 
the model first inserts the cheapest component into the pointing -accuracy 
aggregate equation, assuming low-cost ACS is our objective, and computes 
the pointing accuracy. If the pointing accuracy is poorer than desired, the 
model then selects the next least expensive set of components, iterating 
until the desired pointing accuracy is met. 

The next step is to use the safety aggregate equations to evaluate 
those hardware configurations that have met or exceeded the desired pointing 
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Figure i-1. Cost/Performance Model 









accuracy requirement. The safety considerations consist of failure rate, 
failure detection probability, and the false alarm probability and hazard 
assessment (single point failures and TNT equivalent 1 ). The failure rate 
aggregate equation determines the necessary level (and configuration) of 
redundancy (and component quality) to satisfy the payload and mission reli- 
ability requirements. The failure detection and false alarm probability 
a gg re gate equations quantify the level of system monitoring (onboard or 
ground-based) needed to meet system success criteria. Those ACS hardware 
configurations that meet or exceed all safety requirements are recorded by 
the computer program. The power, weight, volume, thermal specification, 
vibration specification, and ambient pressure specification for the selected 
hardware configurations are then computed using the appropriate aggregate 
equations. Thus, for a given configuration, a set of applicable components 
is chosen (based for example, on minimum cost or on schedule requirements) 
from the data base. This configuration satisfies all the performance and 
safety requirements. After the set of applicable components has been se- 
lected, the centralization of major components is considered. For example, 
should the ACS use a centralized power supply or separate power supplies? 
Also, the trade between centralized signal processing versus separate 
signal processing must be considered. Finally, the total ACS cost and 
schedule are predicted using the cost and schedule aggregate equations. 

This process may be iterated to meet cost or schedule requirements. One 
feature of this aggregate equation approach is the ability to establish sen- 
sitivities to changes in functional requirements. One need only change the 
performance requirement (for example, pointing accuracy) and let the pro- 
cess iterate again to produce new results. 

The following sections describe the major elements of the Cost/Per- 
formance Model, starting with the search/sort /filter technique that selects 
an attitude control method based on a set of performance requirements. 
Following the filter description, the aggregate equations and their relation-* 
ship in forming the Cost /Performance Model are discussed. 

The model only considers these parameters conceptually. 
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1. SEARCH/SORT/FILTER TECHNIQUE 

In the development of the search/sort /filter technique, the usual 
problem of attempting to find a system that meets certain requirements was 
inverted. The approach is based on the existence of only a finite number of 
attitude control methods. The problem is then worked in a manner to deter- 
mine what requirements are met or exceeded by each individual method. 

Once this information has been tabulated for all attitude control methods, 
sorting the possible attitude control techniques by searching through the 
seal ch /so rt /filte r matrix to find systems meeting the requirements is a 
straightforward problem. 

The input to the filter is based on ACS requirements originating 
from the character of the mission and thenature of the payload. The require- 
ments delineate orbital characteristics, spacecraft orientation, spacecraft 
performance, and general vehicle characteristics. For example, the mission 
and payload requirements determine the orbit of the spacecraft, the duration 
or lifetime of the vehicle, the nominal orientation, the attitude and attitude 
accuracy of the ACS, and the stationkeeping and reorientation requirements. 

ACS requirements derived from the basic mission and payload re- 
quirements are categorized, and, in general, multiple control methods may 
seem appropriate for a given set of ACS requirements. Therefore, a 
rationale is required to choose among the possible candidates. This rationale 
is provided by functional requirements, with performance, safety, cost, and 
schedule providing quantitative criteria for tradeoff studies in the detailed 
engineering analysis of the ACS. 

The output of the filter is the one or more control methods appropri- 
ate for the mission under consideration. For the Task 2. 3 study, various 
attitude control methods are classified as active, semi-active, or inactive. 

An active control method uses one or more feedback loops to main- 
tain the vehicle attitude within specified limits. Such a closed-loop system 
is completely self-contained by the spacecraft. 


/ 
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An inactive attitude control technique directs the vehicle orientation 
by a passive feedback system. No sensors, control logic, or actuators are 
required by an inactive attitude control technique. 

The semi -active category covers all schemes that employ some of 
the elements of an active control technique. This may take the form of 
attitude sensors so that the spacecraft orientation may be estimated by 
ground-based data processing. 

In all, nine distinct types of attitude control were considered, in 
which inactive and semi-active configurations are possible for five of the 
attitude control techniques. Three methods employ active or at least semi- 
active control methods to provide stabilization. Finally, a method was 
included to cover those cases where multiple sources of control torque can 
be used successfully in concert (for example, combined gravity gradient and 
magnetic stabilization). 

2. AGGREGATE EQUATIONS AND FUNCTIONAL BLOCK DIAGRAMS 

Aggregate equations are the primary elements of the Cost/Perfor- 
mance Model; however, these equations depend on the particular ACS mecha- 
nization selected. Thus, as a starting point in the determination of aggregate 
equations, functional requirements are translated into function block diagrams 
to determine general ACS mechanizations and associated aggregate equations. 
Next, centralization and redundancy would be considered, leading to specific 
block diagrams from which more detailed aggregate equations are ultimately 
derived . 

Functional requirements are considered for the following four 
classes of vehicles; 
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Requirements for these vehicles are tabulated, and their functional 
ACS block diagrams are discussed for both coast and powered -flight phases. 
The aggregate equations for each ACS type that can be selected by the filter 
must be formulated and available to the Cost /Performance Model. Thus, 
following selection of a particular ACS mechanization by the search/sort/ 
filter, a specific set of aggregate equations would be selected. These 
equations quantitatively relate performance, safety, cost, and schedule of the 
mechanization. As a demonstration of how this is accomplished, aggregate 
equations are discussed in the context of their implementation as a digital 
computer simulation. This discussion is presented to aid illustration of the 
flow of information through the Cost/Performance Model and to provide a 
natural transition to the description of the Cost /Performance Simulation 
following the discussion of aggregate equations. 

a - Performance Aggregate Equations 

Aggregate equations were developed for a Tug -type vehicle with a 
three -axis mass expulsion ACS, using horizon scanners for pitch and roll 
reference and gyrocompassing for yaw reference. This particular type of 
mechanization is typified by the Agena vehicle. 

Vehicle attitude is sensed by a three -axis, body-mounted inertial 
reference unit containing integrating gyros referenced to earth coordinates 
by horizon scanning and gyrocompassing. Fixed attitude with respect to 
the earth is maintained by a pitch program giving the required orbital pitch- 
over rate. 

An illustration of a typical performance aggregate equation is the 
pitch attitude error equation. This equation is derived in this report and 
quantifies pitch attitude error in coast flight in terms of the control system 
deadband and errors associated with components such as the pitch gyro, 
horizon sensor, and electronics. If the instrument or component errors are 
known and stored in a computer -implemented data base, the pitch attitude 
error may be calculated and compared to an allowable error entered as an 
input to the computer -implemented Cost/Performance Model. Furthermore, 
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the same sort, of calculation and comparison could be performed for each 
ACS channel and for each complete combination of sensors stored in the 
data base. Thus, if the data base contains information characterizing three 
distinct inertial measurement units (IMUs) and five horizon sensors, a total 
of 15 IMU/horizon sensor combinations would be available to implement the 
ACS, and each would have a distinct pitch channel attitude error as calculated 
by the pitch aggregate equation. 

The above described method of forming and evaluating ACSs is basic 
to the Cost/Performance Model. Only systems (combinations of data base 
components) meeting performance requirements are stored and subjected 
to further processing as defined by additional performance, safety, cost, and 
schedule aggregate equations. Additional pe rfo rmance -oriented processing 
includes calculation of propellant consumption, power, weight, or vibration. 

Not all performance aggregate equation results are subject to an 
evaluation or comparison procedure. While ACS accuracy in a given channel 
is compared to an allowable error, system weight, power, or propellant 
consumption typically is merely calculated and stored as a characteristic 
descriptive of a specific ACS. These items often represent impacts on 
subsystems other than the ACS, and would provide information to other 
modules of an expanded Cost/Performance Simulation. Subsequent iterations 
would be performed to ensure a balance between the impact on various 
subsystems to ensure a balanced vehicle design. 

Safety Aggregate Equations 

As a result of satisfying certain performance aggregate equations, 
a finite number of ACS configurations are formed by the Cost/Performance 
Model. As the next step in processing these configurations, the safety 
^§S re S a te equations are introduced. These equations are categorized as 
failure rate, failure detection probability, and false alarm probability 
aggregate equations. 
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The failure rate equation is used to calculate the reliability of each 
AGS configuration. This calculation is performed at a module level, with 
the ACS viewed as consisting of four separate modules. The modules 
considered are the sensor, processor, actuator, and energy source modules. 
Each identifiable ACS component is considered as an element of one of these 
modules. Thus, horizon sensors and IMUs would be categorized in the 
sensor module; computers or control logic, in the processor module; pumps, 
in the actuator module; and propellant tanks, in the energy source module. 
Failure rate information stored in the data base for each component is 
extracted as needed by the Cost/Performance Model. These are combined 
by safety aggregate equations to form failure rates for each module of the 
first ACS configuration stored as a result of previous processing by per- 
formance aggregate equations. Module failure rates are combined by still 
other safety aggregate equations to calculate total ACS reliability for a 
given mission duration. 

Again, as in the previous performance aggregate equation processing 
scheme, the calculated reliability of each particular ACS configuration is 
evaluated against a specified or acceptable level provided as a model input. 
However, the ACS configuration is not discarded, as it was during perfor- 
mance evaluation, if it does not meet the specified reliability level. Instead, 
a search for the lowest reliability module is initiated. Upon identification, 
this module is paralleled by an identical unit, and suitable aggregate equa- 
tions are used to recalculate the system reliability. The evaluation and 
paralleling process continues until the lowest reliability module is triply 
redundant. If the system still does not meet the specified reliability, it 
is deleted from consideration as a viable single -string ACS. However, 
should it, at any time, meet or surpass the required input reliability level, 
aggregate equations are used to calculate system failure detection and 
false alarm probabilities. In addition, system characteristics such as 
weight, volume, and total component cost are updated and stored. These 
items must be updated in case the paralleling process has changed ACS 
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total system characteristics. This process continues until each ACS stored 
as a result of meeting performance requirements has been processed. 

The safety aggregate equation procedure described above essentially 
constitutes one-third of the total safety aggregate equation process. Follow- 
ing completion of the basic scheme, the whole procedure is repeated with 
each ACS configuration mechanized, first as an active /standby (dual string) 
ACS, and then as a triply redundant ACS using voting. The terms "active/ 
standby” and "triply redundant” here refer to complete ACSs in addition to 
modular levels of redundancy. For this reason, a separate set of aggregate 
equations is used for processing single -string, active/standby, and triply 
redundant systems. 

The possible number of acceptable ACS mechanizations following 
safety aggregate equation processing is triple the number of systems that 
successfully passed the performance aggregate equation process. This fact 
is accounted for in the computer -implemented Cost/Performance Model, 
by keeping track of three complete sets of system characteristics for each 

ACS configuration originally meeting or surpassing performance require- 
ments. 

Details of safety aggregate equations and flow charts depicting the 
processing schemes discussed above are presented in the main body and 
appendixes of this volume. 

c ■ Cost Aggregate Equations 

Two costing techniques are presented in the main body of this 
report. The first develops cost aggregate equations, using a data base 
structured in a manner similar (but not identical) to the REDSTAR data base 
mentioned previously. This technique results in six cost categories, each 
described by an aggregate equation that is a function of various labor rates, 
task man-hours, material costs, and the number of specific items required, 
such as engineering drawings. Summation of costs for each category deter- 
mines the total cost of the ACS. These cost aggregate equations, to be a 
useful tool, require data in a very detailed WBS format. Unfortunately, 
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such data generally are not available until a design has progressed into its 
intermediate phase. An alternate component costing technique was therefore 
developed to calculate costs in the very early design phase. This alternate 
technique, described below, is the one used in the cost/performance computer 
simulation. 

The component cost approach, which is the second costing approach, 
develops cost aggregate equations based on the cost of ACS components 
selected via the performance and safety aggregate equations and requirements. 
This costing technique requires each ACS component to have non-recurring 
and recurring cost information as part of its data base. This cost informa- 
tion is available from the REDSTAR data base. Aggregate equations then 
sum non-recurring material costs for each component used in a specific 
ACS mechanization to determine total non-recurring material costs for each 
program phase, such as the design and development or the build and check- 
out phase. The form of the non-recurring material cost aggregate equation 
is a sum of the non-recurring costs of the ACS components multiplied by an 
inflation factor. Phase costs are then summed to determine total non-recurr- 
ing material costs. 

ACS non-recurring systems engineering costs are defined as a 
function of total non-recurring material costs, and the material and systems 
engineering costs are finally summed to give total ACS non-recurring costs. 

Total recurring cost aggregate equations are structured in much 
the same manner as the non-recurring cost equations. Finally, ACS total 
costs are obtained by adding recurring, non-recurring, and management 
costs, where management cost is a percentage of total ACS cost. If more 
than one ACS is produced, a learning curve is used to account for reduced 
unit cost as additional units are built. 

d. Schedule Aggregate Equations 

Schedule aggregate equations determine the amount of series time 
required to develop an operational ACS. This determination is accomplished 
by dividing the life cycle of the system into nine phases, beginning with the 
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proposal phase and ending with the operational phase. Aggregate equations 
then describe each phase time in terms of the manpower available to 
complete a specific phase. 

So that required manpower can be estimated, manpower aggregate 
equations are formulated, based on activities associated with each phase. 
Schedule analysis matrices and flow charts are used as a master list from 
which to select pertinent activities. The charts and matrices take into 
account various schedule parameters, such as sequence constraints, man- 
loading limitations, production quantity, production rate, and delivery span. 

F. COST /PERFORMANCE SIMULATION 

This section presents a brief summary of the Cost/Performance 
Simulation to show the manner in which aggregate equations interact with 
the cost performance data base and among themselves. 

Figure 1-2 presents an overview of the ACS Cost/Performance 
Simulation. The flow is the same for batch process operations as for on-line 
terminal operation. 

As depicted in Figure 1-2, entry of model variables and matrices 
initializes the program. A complex data base results from the many inputs 

required to define various ACS components. Therefore, the program is 
structured to allow entry of a stored data base, followed by easy program 
data base modifications or additions. 

The data base actually implemented is the Table 1-1 data base 
presented in detail in Section 6 of this report. It is essentially a list of 
all components available to configure various types of ACSs, with each 
component described in terms of parameters required as inputs to perform- 
ance, safety, cost, and schedule aggregate equations. 

Following the first initialization phase, consisting of data base en- 
try and modification, data are provided for the various performance, safety, 
cost, and schedule criteria to be used in the program during execution. For 
example, performance criteria {such as the required coast flight attitude 
control accuracy in roll, pitch, and yaw axes) are the inputs during this 


1-18 




CALCULATIONS 


/ DOES 

MORE \ NOT 

CONFIGURATIONS >4 ■■ 

\ MEET 

\ / SPEC 



•P'i-Sure 1—2. Cos t / Pe rformanc e Simul3.ti.on Overview 


1-19 













second phase of the program initialization procedure. These inputs are used 
to evaluate acceptability of specific ACS configurations as described in the 
discussion of aggregate equations. A similar input would specify a required 
ACS mission success probability, and set a criterion for acceptance of each 
candidate ACS configuration during program execution of safety aggregate 
equations. Final inputs prior to program execution provide sort criteria 
that will format program outputs by ranking acceptable ACS configurations 
according to cost, reliability, accuracy, or any other criterion calculable, 
using aggregate equations implemented in the simulation. 

As described previously, the safety aggregate equation module 
immediately follows implementation of the performance module in the 
sequence of operations performed during execution of the Cost/Performance 
Simulation. All ACS configurations that have successfully passed perfor- 
mance criteria and are stored in the answer matrix are screened by the 
safety module, as indicated in Figure 1-2. Those single -string systems 
not meeting reliability criteria are upgraded by paralleling the lowest 
reliability module in the ACS sensor, processor, actuator, energy source 
module string. The total reliability of the improved system is then recalcul- 
ated and checked for compliance with reliability specifications. If the system 
is still unacceptable, paralleling of the weakest module continues. (The 
weakest module may or may not be the same module paralleled previously. ) 
This process is continued until the system is acceptable, or until a module 
exceeds triple redundancy, at which point the program rejects the con- 
figuration as unacceptable in a single -string mechanization and proceeds to 
evaluation of the next configuration. Should the system meet reliability 
criteria, failure detection probability and false alarm probability are cal- 
culated for the configuration, and the system is stored in the answer matrix 
as an acceptable single -string mechanization. 

After all configurations stored in the answer matrix have been 
evaluated for compliance with reliability criteria when mechanized as a 
single -string ACS, the program proceeds to evaluate each configuration in 
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an active /standby ACS mechanization. As before, paralleling of modules is 
allowed to upgrade reliability of the active /standby mechanizations, and in- 
dividual modules are held to maximums of triple redundancy. Systems 
meeting reliability criteria have failure detection and false alarm probabilitie 
calculated, and are then stored in the answer matrix as an acceptable active/ 
standby mechanization. 

Following evaluation of all answer matrix entries as active /standby 
mechanizations, the program evaluates each entry in the answer matrix 
mechanized as triply redundant ACS with voting, In this sample mechaniza- 
tion, upgrading of individual modules by paralleling is not allowed, as the 
total ACS is already triply redundant. Other calculations proceed much as 
described for previous mechanizations, and detailed flow charts of the 
procedures described above are provided in Section 5 of this report. 

Configurations not meeting reliability criteria after safety module 
processing are deleted from the answer matrix, and the program proceeds 
to processing of schedule and cost aggregate equations. 

Upon completion of the ACS requirements phase of initialization, 
the program begins execution of performance aggregate equations and decis- 
ions. 

In the performance module of the Cost/Performance Simulation, 
the acceptability of each candidate ACS is evaluated by comparing calculated 
ACS performance, as determined by performance aggregate equations, to 
required ACS performance parameters entered during program initialization. 
The flow of calculations in this module may be relatively simple, such as 
those shown in Figure 1-2, or they may be more complex and essentially 
represent a basic error analysis of a particular ACS configuration. In 
general, use of the simulation during early conceptual phases of a program 
would rest on several baseline ACSs, with each specific baseline defined by 
a separate set of aggregate equations. Later applications could be based on 
a single ACS configuration requiring a single set of performance aggregate 
equations. The program is structured to accept these intermodule changes 
without disrupting the basic intramodule interactions that form the basis of 
the Cost/Perfo rmuncc Simulation. 
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Regardless of the level of sophistication of the performance aggregate 
equations, all ACS configurations passing the performance criteria are 
stored in the answer matrix. This matrix maintains a dynamic record of 
the characteristics of ACS configurations that have met or surpassed 
criteria entered during program initialization, such as total ACS weight or 
an identifier of a particular data base component that is a part of a specific 
ACS configuration. 

Schedule and cost calculations are a straightforward implementation 
of the schedule /cost aggregate equations; however, the present sample pro- 
gram does not implement schedule equations. Present plans call for present- 
ing schedule results as charts showing major program milestones for each 
configuration stored in the answer matrix. Each chart would be keyed to 
the printout of other information for the particular configuration that it 
represents; the total package represents complete assessment results of all 
ACS configurations meeting performance and safety criteria. For ease in 
evaluating various ACS configurations, printouts are ordered according to 
the particular criteria entered by the operator. 

G. INTERACTION WITH OTHER SUBSYSTEMS 

The interaction of the ACS with some of the other subsystems was . 
briefly considered. A generalized guideline for the development of a power 
conditioning system for the ACS is given in Section 7. The major thermal 
drivers that influence the design and operation of typical ACS components 
are identified in Section 8. The nature of the requirements placed on the 
ground support equipment (GSE) by the ACS is discussed in Section 9. 

H. COST /PERFORMANCE MODEL SAMPLE CAECUEATION -CER 
COMPARISON 

Figure 1-3 compares sample calculations of the Cost /Performance 
Simulation with a cost-versus-weight CER developed at SAMSO. The Cost/ 
Performance Simulation output of cost versus weight for a three -axis ACS is 
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consistent with the cost -versus -weight GER developed at SAMSO. CER 
results were obtained by summing DDTE costs, with first article cost 
adjusted by a learning curve to obtain the cost of 2 0 systems. These results 
were obtained using a data base consisting of three distinct horizon sensors, 
three star references, and three IMUs. This gives a total of 27 unique ACS 
component combinations or 81 ACSs, counting single -string, active /standby, 
and triply redundant mechanizations. 

Figure 1-4 shows the cost-versus -reliability relationship for the 
same 20 systems. Details of this and other simulation results are given in 
Appendix C. 

It is concluded, based on the curves of Figure 1-3, that Cost/Per- 
formance Model results are in substantial agreement with results obtained 
using conventional approaches. However, the Cost /Performance Model 
provides ^ more detailed insight and a potential for accomplishing sensitivity 
studies, using up-to-date data bases, and for performing trade studies 
between various subsystems unobtainable using converntional approaches; it 
also indicates regions where components are not available. 
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2. BACKGROUND INFORMATION DEVELOPMENT 

A review of existing cost and performance estimating techniques and 
data bases was conducted to provide a basis for the development of a new 
methodology for relating performance, safety, cost, and schedule for an 
attitude control system (ACS). A literature search was conducted to ascer- 
tain related work already performed and to determine the strengths and 
limitations of existing techniques, and their applicability to any new method- 
ology. As a part t>f the background information, a baseline ACS configuration 
was defined, and its requirements were developed. 

A - REVIEW of models /programs 

This section summarizes and critiques the major aspects of existing 
cost and performance models as applied to the ACS. The review covered 
three Aerospace and SAMSO models (SAMSO/RAMMSS Model, Solid Rocket 
Motor Cost Model, Large Solid Rocket Motor Sizing Program); two joint 
NASA /Aero space models (Space Transportation Model, Vehicle Synthesis 
Program); and other related models and material [ General Electric Attitude 
Control Design Model, USAF System Command 375 Series Manuals, Honey- 
well Cost Analysis Study, Optimal Design Integration System (ODIN), and 
Integrated Programs for Aerospace Vehicles Design (IPAD) Programs]. 

A model is a set of equations and related mathematical expressions 
describing the essence of a problem. A cost model provides estimates of the 
cost of performing tasks and producing hardware and software. The relia- 
bility of these estimates is dependent on the quantity and quality of appli- 
cable data, and the use of analytical tools, logic, and reasonable intuition. 

The quality of the output is a direct function of the time and analysis devoted 
to the development of the model. 

Data are input to a model in several ways. Data may be used to 
develop cost estimating relationships (CERs), which are then utilized in the 
model. Data used as standard values among different systems for which 
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estimates are being prepared are written in the program. System dependent 
data are entered by the analyst for each system design being evaluated. 

The output of a model is determined by the customer's needs. One 
model may be developed for several different users, in which case the output 
must satisfy the combined needs of the users. The output requirements vary 
from detail to summary data, tabular and graphic displays, static (non-time- 
phased) or dynamic (time-phased) printouts, with or without derivation 
methodology and backup data. The analyst must know the customer's needs 
and satisfy those needs with appropriate output. 

A dynamic or time-phased model can become complex, large, and 
unwieldy because of the interaction of the time- influenced routines and the 
amount of data required to define parameters as functions of time. Among 
the commonly used relationships is the learning curve that takes into account 
the reduction of the cost per unit with increased production. Escalation and 
discounting functions are also time-oriented and reflect the change in value 
of dollars with time. Scheduling routines are time-defined and may range in 
complexity from simple statistical models to sophisticated routines taking 
into account such factors as series and parallel operations, critical paths, 
long-lead-time items, and the impact of unforeseen changes. 

Two approaches, commonly referred to as "top-down" and "bottom- 
up, " were apparent in the models reviewed. A top-down approach utilizes 
relations derived by curve-fitting or regression analysis on historical data. 

A common example of this approach consists of CERs, which are used in 
many of the models reviewed. The CERs have two major shortcomings 
relative to the desired goals of the new cost/performance methodology: 
first, existing CERs (i. e. , dollars per kilogram) do not reflect cost sensi- 
tivity to changes in functional requirements; second, in most cases, not 

enough data on similar systems is available to derive statistically valid 
relations. 

In a bottom-up approach, a system or subsystem configuration is 
defined, and such parameters as cost are derived by combining the costs of 
the individual modules or components. The disadvantage of this approach is 
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that a detailed system configuration is usually not available during the pre- 
liminary stages of the design process, when a cost/performance model would 
be most useful. The advantage of such an approach is that its outputs are 
sensitive to changes in functional requirements. 

A common element in many of the reviewed models is a work break- 
down structure (WBS), A WBS is a master structure that categorizes the ele- 
ments or components of systems and subsystems to provide a consistent frame- 
work for collecting and reporting data on costs, schedules, and procurement. 
Each element of a WBS represents the summation of all tasks, products, and 
costs specifically identified to a particular system or subsystem. A specific 
example of a WBS and several of its elements is given in the description of the 
Resource Data Storage and Retrieval (REDSTAR) data base in Section 2. B. i. 

1. REVIEW OF AEROSPACE AND SAMSO MODELS/ PROGRAMS 

a. SAMSO /RAMMSS Cost Model 

The Resources Analysis Model for Military Space Systems (RAMMSS) 
utilizes the basic subsystem CERs defined in the SAMSO Unmanned Spacecraft 
Cost Model (Ref. 1), and time-phases the program activities. The purpose 
of the model is to determine the time-phased, life- cycle costs of unmanned 
spacecraft systems. 

The initial model (November 1969) contains the data from which the 
major subsystem CER coefficients were developed. The CERs and the asso- 
ciated statistical analyses are also presented. This model utilizes a brief 
and relatively simple WBS. The Phase I update (August 1971) upgrades and 
expands the original data set. The basic model utilizes cartesian linear 
CERs of the form Y = A+B* X; the updated model also utilizes log linear equa- 
tions of the form Y = C+A‘X B if a greater degree of correlation is obtained. 

The costs are presented in seven activity phases: 

(1) Appropriation 3600 - research, development, test, and 
evaluation (RDTE) 

(2) Appropriation 3020 - initial investment 

(3) Appropriation 3020 - replacement investment 
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(4) Appropriation 3080 - other investment 

(5) Appropriation 3300 - military construction 

(6) Appropriation 3400 - operations and maintenance 

(7) Appropriation 3500 - pay and allowances. 

The major subsystems evaluated in the model are 

(1) Structure 

(2) Thermal control 

(3) Propulsion 

(4) Telemetry, tracking, and command 

(5) Mission equipment 

(6) Electrical power supply 

(7) Attitude control 

(8) Dispenser. 

Input data to the computer program are of two types, non-repetitive 
and repetitive. The non-repetitive data are input once and are applicable to 
all systems being evaluated. Some data are stored and become part of the 
computer program. The primary input describes the methodology and ground 
rules, and the characteristics of the subsystems, program schedule, and 
other equipment. 

The output data constitute a complete package in a form deliverable 
to the customer. The costs are presented at several levels of detail; date, 
title, recipient, and preparing analysts are printed, and supporting informa- 
tion is included to provide the customer with sufficient information to evaluate 
the costs. The output from the model includes static (non-time- phased) costs 
by phase by detail cost element; time-phased cost by phase by major cost 
element (both inflated and uninflated); and cost summary by appropriation 

numbers. In addition, a time-phased graphic display of the program activities 
is included. 

The RAMMSS model is capable of producing total life-cycle costs 
for unmanned spacecraft systems, based on historically derived CERS. 
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b. 


Solid Rocket Motor Cost Model 


The Solid Rocket Motor (SRM) Cost Model (Ref* 2) provides a sys- 
tematic and standardized procedure for estimating life- cycle costs of SRM 
booster configurations, based on the Space Transportation System cost method 
ology. In this model, an SRM Cost Model has been developed for booster 
configurations of the type used on the Space Shuttle. Most of the cost data 
were obtained from the study of SRMs for a Space Shuttle performed by the 
SRM manufacturers representative of the 3* 05-m (120-in. ) and 3. 96-m 
( 156-in. ) parallel or series burn booster configurations. 

Most CER coefficients were developed from four or fewer data points, 
which represented the existing data base for large SRMs. 

The life cycle is divided into three phases: RDTE, investment, and 
operations. The functions and equipment unique to the recoverable booster 
program are 

(1) RDTE 

(a) Recovery system 

(b) Training of recovery personnel 

(c) Test operations, recovery of flight test vehicles 

(d) Recovery facilities and ground support equipment (GSE) 

(2) Investment 

(a) Additional recovery facilities and GSE 

(b) Refurbishment of research and development hardware 

(3) Operations 

(a) Recovery operations 

(b) Maintenance of recovery fleet 

(c) Replacement training of recovery personnel 

(d) Maintenance of recovery facilities and GSE 

(e) Refurbishment support* 

The design and performance parameters examined for developing 
CERs were thrust, total impulse, motor weight, mass fraction, and propellant 
specific impulse. A combination of quantity and either total impulse or weight 
provides a good estimate of solid motor production costs. 
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The data is input under the following headings: 

(1) Refurbishment factor 

(2) Rail freight cost per 454 kg (1000 lb) 

(3) Water shipment cost per booster 

(4) Number of new fleet boosters 

(5) Number of new fleet motors 

(6) Number of flight tests 

(7) Number of flight test motors 

(8) Number of equivalent ground test motors 

(9) Number of equivalent initial spares motors 

(10) Average number of launches per year 

(11) Maximum number of launches per year 

(12) Number of motors per booster 

(13) Number of equivalent spares support motors 

(14) Number of uses per motor 

(15) Number of years flight test operations 

(16) Number of years operations phase 

(17) Number of years test operations 

(18) Total number of operations phase launches 

(19) Stage weight 

(a) Stage structure weight 

(b) Recovery system weight 

1. Parachute system weight 

2. Retro rockets weight 

(20) Propulsion weight 

(a) Primary (SRM) weight 

1- Case and insulation weight 

2* Nozzle weight 

3* TVC weight 

4. Other weight 

5. Propellant weight 

(b) Secondary weight 

(21) Total motor gross weight. 
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The output from the model is presented as seven different cost 

groups: 

(1) Program cost estimate summary 

(2) First unit cost 

(3) RDTE cost 

(4) New fleet hardware cost 

(5) Investment cost 

(6) Operations cost 

(7) Direct operating cost. 

The model is designed to determine the life -cycle cost of an SRM 
booster as utilized in the Space Transportation System (STS) cost model. It 
is compatible with the Earth-to -Orbit Shuttle (EOS) methodology. 

As with most statistical models, the weaknesses are the limited 
number of data points consisting of real and hypothetical values. An expan- 
sion of the data base could benefit this model and many other cost-predicting 
models. 

c * Large Solid Rocket Motor Sizing Program 

The Large Solid Rocket Motor Sizing Program (Ref. 3) configures 
an SRM launch vehicle that satisfies specific missions, and utilizes inputs of 
the structure, weight, propulsion, aerodynamics, cost, and mission. The 
program output defines the internal ballistics of each stage, and lists weight 
and cost data for the total vehicle and component parts. 

The program determines and stores the characteristics of each stage 
of an n- stage vehicle, starting with the upper stage and concluding with the 
first stage. These stored data are used to calculate the vehicle characteristics. 
Two subprograms are utilized to determine the characteristics based on 
and compatible with the given set of input data defining each stage. The first 
subprogram determines realistic internal ballistics based on and compatible 
with the given set of input data defining each stage. The second subprogram 
determines the component weight for each stage, sums the component weights 
into a stage weight, and finally, from the stage weights, determines a vehicle 
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weight statement. This subprogram is dependent on input data and informa- 
tion generated by the internal ballistics subprogram. The parameters 
required for a trajectory simulation are transferred from the stored vehicle 
characteristics to the trajectory program. The trajectory program alters 
the sizing input parameters until the trajectory constraint is satisfied. Then 
the program lists the vehicle configuration, the stage-by-stage configuration, 
and the pertinent design parameters before terminating. 

The program contains a number of options; one is a cost option. 

The basic cost model utilizes equations of the form 
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where the X £ are complicated equations of the form X = riBz a . These equa- 
tions are not unlike CERs, although they are more directly based on the per- 
formance aspects of SRM design. The coefficients in the models are based 
on historical data. Guidance system costs are input as separate costs. 

Although not directly applicable to the ACS Cost/Performance Model 
undertaken m this study, the program is an interesting application of the 
performance and design aspects of a subsystem to cost estimating. 

2. REVIEW OF JOINT AEROSPACE AND NASA MODELS/PROGRAMS 

a * Space Transportation System Model 

The STS Model consists of the EOS Methodology, the Orbit -to -Orbit 
Shuttle (OOS) Methodology, the STS Computer Program, and several supporting 
data reports {Refs. 4 through 7). The model determines the time -phased, 
life -cycle costs of a reusable STS for injecting payloads into earth orbit and 
maneuvering payloads between orbits. 

There are two separate and complete methodologies, one for the 
EOS and one for the OOS. The same WBS is used in both models. The RDTE 
phase is comprised of four major elements: conceptual and definition, engi- 
neering development, technology support, and Government program 
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management. The investment phase is comprised of four major elements: 
facilities and equipment, reusable vehicle fleet, expendable hardware, and 
Government program management. The operations phase is comprised of 
three major elements: operations, spares and propellant support, and 
range /base support. 

The costs of the primary elements are based on CERs. The CERs 
are derived from basic data contained in Ref. 4, Volume III. The CER 
coefficients are based on statistical least- squares regressions. The costs of 
the other elements are based on factors, fixed throughputs, and summations. 

Input data to the computer program are of two types. Level I and 
Level II. Level I data are independent variables {such as weight, thrust, 
and man-years) and describe a particular system design. The Level II data 
are constants and exponents of the CERs. 

The output of the computer program consists of two principal cate- 
gories. the basic output report and the time-phased output report. The basic 
report provides a static (non-time-phased) display of all costs in the STS life 
cycle. The time-phased report, an optional feature, provides a summary of 
major cost elements in the life cycle on an annual basis. These time-phased 
costs can be displayed in base year (current) dollars, in actual year (adjusted 
for inflation) dollars, or in present value dollars. The life-cycle costs are 
separated into RDTE, investment, and operational phases. In addition to 
these three phases, a fourth block, identified as "vehicle first-unit costs, " 
is utilized in the model. 

The STS Cost Model is a joint NASA/USAF tool. The model was 
designed specifically to develop total system costs for alternative STS concepts 
The WBS is tailored to provide cost estimates of the most significant elements- 
in the three major program phases. The CERs and factors used in the model 

to estimate the costs were obtained from programs similar to projected STS 
programs. 

Many of the CERs and factors are based on a limited number of data 
points. The methodology has been developed, to a large degree, from the 
Gemini and Apollo Programs. Because the STS Program may extend the 


2-9 



state of the art significantly, the applicability of some earlier program data 
must be reevaluated as the program progresses. The statistical analyses 
that can be performed are severely limited by the small data set for many 
of the cost elements. 

b. Vehicle Synthesis Program 

Programs similar to the present (September 1972) Vehicle Synthesis 
Program (VSP) have been used at The Aerospcae Corporation for several 
years (Ref. 8). The VSP document was written in response to a request from 
the Manned Spacecraft Center Operations Analysis Branch. These personnel 
were interested in the program because of its adaptability to cost sensitivity 
studies being conducted by the Operations Analysis Branch, The computer 
program optimizes the Shuttle configuration with respect to weight, and 
permits the assessment of variations in design parameters such as payload 
weight, velocity increments, and propellant specific impulse. 

The VSP computer program, which is described in this section, was 
adapted for a single Space Shuttle configuration. This configuration, one of 
two Space Shuttles then being considered by NASA, consists of a drop- 
tank orbiter using LC^/LH^ propellants, which is boosted by twin solid -pro- 
pellant rocket motors. The orbiter and booster rockets thrust simultaneously 
until the SRMs arc depleted. The orbiter continues thrusting after booster 
staging until the desired orbit is achieved. 

The VSP determines changes in vehicle size and weight that occur 
when certain vehicle parameters are varied. The most commonly varied 
parameters are 

( 1 ) Payload weight 

(2) Payload bay volume 

(3) Drop tank weight ratio 

(4) Propellant specific impulse 

(5) Contingency factor for weight growth. 

Since many of the subsystem weight relationships contain the total vehicle 
weight as a parameter, iterative methods are used to obtain convergence. 
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The first iteration calculates the orbiter weight. The second iteration deter- 
mines the booster size necessary to achieve the desired total AV. The third 
iteration manipulates the weights of the booster and orbiter until the desired 
AV split between the two is attained. 

All the weight-estimating equations are based on the application of 
correlation methods employing contractor's historical data. The total vehicle ‘ 
weight is determined as the sum of the weights of 2 0 subsystems. This VSP 
was not incorporated in this study, since the weight -estimating relationships 
are based on the correlation of historical data, and not on functional require- 
ments. The VSP could be used in a total vehicle program, since the VSP Pro- 
gram deals with the weight of an entire vehicle, rather than merely ACS weight. 

3. REVIEW OF OTHER MODELS/PROGRAMS AND RELATED MATERIAL 

a - General Electric Attitude Control Design Model 

In June 1965, General Electric Co. completed Research and Investi - 
gation on Satellite Attitude Control (Ref. 9). This work developed a design 
guide based on the design flow pictured in Figure 2-1. This model is based 
on the mission parameters given to the design engineer. The required 
vehicle control torques and control system power are derived from the speci- 
fied mission parameters. The design guide establishes tradeoff data such 
that when a specific vehicle mission is defined, the optimum ACS can be 
designed and constructed. Therefore, the study is divided into four main 
parts: 

(1) Preparation of a design data guide 

(2) Application of the ACS model to validate the design guide 

(3) Investigation of means to produce control moments 

(4) Investigation of space power systems to provide energy to 
the ACS. 

The design guide indicates the tie-in between the vehicle attitude 
control, energy source, and mission requirements. This guide provides the 
design engineer with data that facilitates the determination of the optimum 
control and power source for a given vehicle and mission. The optimum 
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Figure 2-i 


Flow Chart Exhibiting Selection of Optimum Control 
System and Power Sources 











system is achieved when performance and reliability requirements are 
satisfied and weight and power are minimized. The secondary factors of 
producibility, maintainability, and cost must also be favorable. Representa- 
tive categories of vehicles and missions are considered to present the 
tradeoff data. 

In all, six distinct missions are considered: military, astronomical, 
meteorological, communications, space environment, and space station. 

The implications of these different missions are reflected in the required 
pointing accuracy, mission duration, and reliability. 

Four categories of space vehicles are considered to further define 
the scope of the design guide: 

(1) Class A : a vehicle with few or no control requirements, 
such as the Tiros satellite 

(2) Class B : a vehicle with a three-axis ACS requirement and 
a weight between 181.4 kg (400 lb) and 907. 2 kg (2000 lb), 
as, for example, the Nimbus weather satellite 

Class C ; a vehicle with the same control requirements as 
Class B, but a weight of 907. 2 kg (2000 lb) to 4536 kg 

(10,000 lb), with Orbiting Astrological Observatory (OAO) as 
an example 

(4) Class D : a large vehicle such as a space station, with a 

weight between 4536 kg (10,000 lb) and 90,720 kg (200, 000 lb). 

The requirements for a Class A vehicle indicate that sufficient control torque 
can be obtained from magnetic torquing, spin stabilization, or passive stabi- 
lization. The requirements for three-axis active stabilization for Class B, 

C, and D vehicles can be met with control moment gyros, conventional mass 
expulsion, or electric propulsion. 

The second portion of this study validates the design guide by the 
construction of an ACS model and the investigation of two case studies. The 
first study models the fluid flywheel for a hypothetical mission. The second 
case models the Nimbus satellite as a state-of-the-art system; the ACS 
determined in this study is nearly identical to the actual ACS used on the 
vehicle. 
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The data on control systems in the design guide are developed in the 
third study, which investigated space vehicle attitude control techniques. 
Major emphasis was placed on four actuation methods: inertia wheels, fluid 
flywheel, control moment gyro, and conventional mass expulsion. For each 
of these control techniques, descriptions of all the different components of 
the system are carried out. A method of selecting the optimum components 
for various methods is treated. Steady- state and dynamic analyses of each 
system are performed to determine its ability to meet mission requirements. 

A reliability analysis of these four control techniques is conducted 
using a statistical method to estimate system failure rates. The reliability 
of the four techniques is predicted for mission durations of 1 month, 1 year, 
and 5 years. 

The fourth and final portion of this study considers power subsystems 
for the space vehicle. The three energy sources considered are solar, 
chemical, and nuclear. Conversion devices are used to generate electrical 
power from these sources. The power conversion devices are considered 
with respect to state of the art, reliability, weight, problem areas, and 
envii onmental effects. This information is used to synthesize power sub- 
systems for the three primary energy sources. 

While the General Electric method embodies some of the concepts 
(performance and safety) of the model under development in this study, it 
cannot be used as the basis of the Cost/Performance Model because 

(1) The General Electric method is an open-loop process. It is 
essential that feedback be included in the design method so 
that cost and schedule results of the selected design be 
reviewed with respect to the importance of the requirements. 

(2) The other major requirement factors — cost, schedule, 
maintainability, and producibility — are not clearly identified. 
Their importance is treated only in a qualitative manner. 

It is necessary to quantify these factors if they are to con- 
tribute to a balanced design technique. 
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(3) 


There is no consideration of the contribution of the attitude 
sensor characteristics to the overall ACS performance, 
weight, power, reliability, cost, and schedule. The role 
of the sensor in the design process must be identified and 
quantified. 

b - USAF Systems Command 375 Series Manuals 

The 375 Series Manuals (Refs. 10 to 16) were published in the mid- 
1960s and constituted an AFSC attempt to provide a procedural baseline for 
management of programs involving relatively complex hardware, software, and 
management interfaces. Thus, review of the manuals was predicated on the 
belief that the 375 Series Manuals might provide insight into the modeling of 
the design process. 

The Systems Engineering Management Manual (AFSC 375-5) serves 
two purposes: first, it defines a common system analysis process that leads 
to system definition in terms of performance requirements on a total system 
basis; second, it provides a detailed sequential road map of engineering 
actions during a system's life cycle. The focus of the manual was to ensure 
that the elements of a system design were directly derivable from the program 
requirements. However, the cost estimating performed within the framework 
of the manual was generally directed toward estimating the tasks to be per- 
formed to meet the program requirements, rather than deriving costs directly 
from the program requirements. The cost management was structured using 
traditional accounting procedures without relating costs to specific require- 
ments. Thus, the structure of the manual appears to be of limited utility in 
attacking the objectives of this task. 

The manuals do contain a comprehensive description of the entire 
process of system acquisition and deployment, and serve as a useful check- 
list for determining the completeness of models structured within this task. 

c. Honeywell Cost Analysis Study 

In December 1969, Honeywell, Inc. completed an Advanced Space - 
craft Subsystem Cost Analysis Study (Ref. 17). The study consisted of a 
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historical review of the Stabilization and Control Systems provided by Honey- 
well for the Apollo Block I and Block II, Gemini, and F-104. The general ob- 
jective of the study was to systematically collect and document existing infor- 
mation pertaining to the three programs into a thorough and consistent data 
bank. The data bank was to be used to develop techniques for estimating 
subsystem requirements. 

The primary objective of the study was to develop a data book docu- 
menting all significant events and activities in the actual hardware develop- 
ment programs. The data book isolated those items that had a significant 
and correctable influence on cost, weights, or development lead times. It 
also presented quantifiable design elements of the actual subsystems and 
examined the difficulty of each from a state-of-the-art standpoint. 

Secondary objectives were 

(1) To develop and test a subsystem cost- estimating technique 
that fully utilizes Apollo, Gemini, and F-104 experience 

(2) To develop time-phased estimates of the development costs 
and other resource requirements for prospective spacecraft 
subsystems. 

In accomplishing the primary objective of the study, Honeywell 
compiled and extensively cataloged the cost elements of the three programs. 
For this reason, the data handbook may be useful in Task 2. 3 when model 
testing is contemplated. 

Honeywell attempted to create a cost- estimating tool, using the cost 
data from the three programs, estimated relative complexity factors for the 
planned function, program management, inflation factors, and a division 
between recurring and non-recurring cost elements. Difficulties with the 
model result from the subjective nature of the relative complexity estimation, 
and, more importantly, from ambiguity or lack of definition of the equipment 
and tasks related to the planned functions. 
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By conducting an internal survey of 48 supervisors and managers, 
Honeywell also attempted to identify the "cost driving" elements of a program. 

The survey concluded that the following four elements were the primary cost 
drivers: 

(1) System performance requirements 

(2) Program duration 

(3) Changes 

(4) Extent of system responsibility. 

. The Honeywell study activity resulted in two major conclusions. 

First, the study showed no usable correlation between weight and cost for 
Stabilization and Control Systems (SCSs). Previous cost analysts have dem- 
onstrated consistent cost/weight ratios; cost estimators, in turn, have used 
these ratios to estimate costs. Second, the study showed that two SCSs may 
differ markedly in weight, volume, cost, and task performed. 

d. ODIN and IPAD Programs 

As the final task in the background information development, the 
ODIN and IPAD Programs were investigated. ODIN (Ref. 18), a system devel- 
oped at Langley Research Center, consists of a data base, the DIALOG execu- 
tive, and a collection of modules describing various aspects of the technology 
used in spacecraft design. (See Figure 2-2.) ODIN integrates computer models 
for various aspects of system design to facilitate an optimum system engi- 
neering approach to vehicle design that does not require a newly written 
program for each task. In addition, it provides the simultaneous availability 
of many different design evaluations and also provides a common data base 
for these design evaluations. The common data base can be particularly 
important, because the evaluation of competing systems using separate pro- 
grams with different data bases produces results that may not be directly 
comparable. 

Conceptually, the Cost/Performance Model would be one of the 
modules of the ODIN system and would provide cost/performance tradeoff 
capability. 
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IPAD (Ref. 19), also developed at Langley Research Center, supports 
the engineering design team by implementing, as much as possible, the compu- 
tational and data management aspects of the aircraft design process. One 
objective of the IPAD concept is the capability of evolving with change, with- 
out rebuilding the computer model to accommodate changes in the design 
process. IPAD is organized in a modular fashion, with self-contained com- 
ponent programs that correspond to major disciplines (i. e. , structures, 
aerodynamics, or propulsion), subdisciplines, or computational tasks 
involved in the aircraft design process. The modules are linked through an 
executive program and utilize a common data base. Figure 2-3, from 
Ref. 19, shows the program organization. 

B. DATA BASES 

As integral part of the background information development, it was 
necessary to investigate the existing data bases. 

The key to making meaningful estimates on the relationship among 
performance, safety, cost, and schedules is the access to a properly- 
structured set of data involving the prior experience of space programs. It 
is not intended that the modeling methodology be strictly constrained to work 
on any particular data base. In fact, it is fully expected that data not current- 
ly available will be necessary to perform the costing analyses. It is expected 

that the methodology developed here make as much use as possible of existing 
data bases. 

Two collections of existing data bases are described: REDSTAR 
is of primary interest, since it was developed for NASA by Planning 
Research Corporation as part of the Application of Engineering Cost Analysis: 
the other is an Aerospace collection of data on various programs. 
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Figure 2-3. Conceptual Organization of Integrated Programs for 
Aerospace Vehicles Design (IPAD) 









1 . 


REDSTAR DATA BASE SYSTEM 


In fiscal year 1972, Planning Research Corporation prepared a study 
entitled Application of Engineering Cost Analysis (Ref. 20), The REDSTAR 
data base system was developed as a part of that fiscal year 1972 study. 

The REDSTAR data base was developed as a general purpose data 
system intended to file and retrieve all possible elements describing a pro- 
gram. The data are to include technical and other characteristics, as well 
as cost. The key to the entire data system is the WBS. Other elements of 
the data system are the Subdivision of Work Structure (SOWS) and the Elements 
of Cost (EOC). As shown in Figures 2-4 and 2-5, the data base is a three- 
dimensional matrix of elements. The WBS is common to all the categories. 
Planning Research Corporation has defined the WBS to six levels: 

a. Program 

b. Project 

c. System 

d. Group 

e. Subsystem 

f. Component. 

For example, one might look up characteristics of the star tracker 
(Level f) of the Guidance and Navigation Subsystem (Level e) of the Avionics 
Group (Level d) of the Spacecraft System (Level c) of the Spacecraft Systems 
Projects (Level b) of the Program XYZ (Level a). A complete breakdown of 
the WBS is given in Ref. 20 to Level e with some examples to Level f. It was 
intended that the structure be developed to lower levels as required for speci- 
fic programs. WBS elements were selected according to the following 
criteria; 

a. WBS elements shall be entirely end-item hardware. 

b. WBS elements of a general nature have been selected for 

, Aerospace system application. Specific identification of all 

entries shall be required for each program. 

c. The WBS shall not be aligned to any specific corporation or 
NASA Center organization. 
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Figure 2-4, WBS/SOWS/EOC Matrix Contents 




-23 


WBS 


SOWS 


EOC 


ro 


PROGRAM 

PROJECT 

SYSTEM 

AIRFRAME (STRUCTURAL) 

PROPULSION 

AVIONICS 

POWER 

ENVIRONMENTAL CONTROL 
AND LIFE SUPPORT 

CREW HABITABILITY 

EXPERIMENT SUPPORT 

SUPPORT EQUIPMENT 

LAUNCH SUPPORT EQUIPMENT 

MIS5ION SUPPORT EQUIPMENT 


DESIGN, DEVELOPMENT, TEST, AND EVALUATION 

r- ENGINEERING 

TOOLING AND SPECIAL TEST EQUIPMENT 
PRODUCTION - PROTOTYPES 
S TEST AND EVALUATION 

I QUALITY CONTROL 

I PROGRAM MANAGEMENT 

| SYSTEMS ENGINEERING AND INTEGRATION 

j OTHER 

INVESTMENT (non- recur ring) 

FACILITIES 

OTHER 

INVESTMENT (recurring) 

ENGINEERING 

PRODUCTION - PRIME MISSION EQUIPMENT 
PRODUCTION - INITIAL SPARES 
PRODUCTION - MODIFICATION KITS 
TOOLING AND SPECIAL TEST EQUIPMENT 
QUALITY CONTROL 
TRANSPORTATION 
PROGRAM MANAGEMENT 
SYSTEMS ENGINEERING AND INTEGRATION 
OTHER 
OPERATIONS 

LAUNCH SUPPORT 
MISSION SUPPORT 
TRAINING 

QUALITY CONTROL 

EXPERIMENT REMOVAL AND INSTALLATION 
EXPERIMENT INTEGRATED TEST 
MAINTENANCE AND REFURBISHMENT 
CHANGE AND MODIFICATION KITS INSTALLATION 
EXPENDABLES 

INTEGRATED LOGISTICS SUPPORT 

TRANSPORTATION 

PROGRAM MANAGEMENT 

SYSTEMS ENGINEERING AND INTEGRATION 

OTHER 


-►LABOR HOURS 

LABOR DOLLARS 

MATERIALS 

SUBCONTRACTS 

BURDENS 

OVERHEAD 

GENERAL AND 
ADMINISTRATION 

FEE 


Figure 2-5. WBS/SOWS/EOC Breakdown 






Terminology shall be consistent with past and current efforts 
on WBS as applied by MSFC, other NASA centers, and DoD. 

Under each level (program, project, system, group, and 
subsystem), a WBS element identified as "other" shall be 
included. This element shall be included to permit items 
peculiar to the next lower level (stage integration hardware; 
interprogram, project, or system hardware integration). 
This element shall be required to permit total task and cost 
traceability. 


The major effort to date has been on the cost descriptions. For each 
WBS element, the costs are further divided into the SOWS and EOC. The 
SOWS subdivides the cost among the various categories shown in Table 2-1, 
while the EOC allows distinction between labor, material, etc. , as shown in 
Table 2-2. Data for some programs have been entered into REDSTAR by 
NASA. While it is still preliminary and not fully checked out, some use could 
be made of it. Great care will be required to ensure that costs are properly 
allocated to the various categories. 


Each element represents the summation of all tasks, products, and 
costs specifically identified to an element or its subelements, including all 
directly related support efforts. The life-cycle phasing of each element into 
design, development, test and evaluation; investment/recurring; investment/ 
non-recurring; and operations can be obtained from a matrix of the WBS and 
SOWS elements. The functional components of each phase can also be 
included in the WBS/SOWS if this additional information is desired. 


When one embarks on the assessment of the cost/performance 
tradeoffs of an ACS, one problem with the WBS is encountered immediately. 
The structure is not divided in the way an ACS designer views his system, 
and the category autopilot is by no means the whole ACS. In fact, a prelim- 
inary search through the WBS reveals many categories that must be present 
for the ACS to function. (See Table 2-3. ) Some of these, such as power, are 
really peripheral to the controls, while others, such as thruster and horizon 


sensors, are generally considered an integral part of the controls. 

This lack of correspondence between the WBS and functional break- 
down does not necessarily mean that the WBS cannot be used. However, 
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Table 2- 1 . SOWS Elements 


Design, Development, Test and Evaluation 
Engineering 

Tooling and special test equipment 

Product ion -proto types 

Test and evaluation 

Quality control 

Program management 

Systems engineering and integration 

Other 

Investment (Non-Recurring) 

F acilities 
Other 

Investment (Recurring) 

Engineering 

Production - prime mission equipment 
Production - initial spares 
Production - modification kits 
Tooling and special test equipment 
Quality control 
T ransportation 
Program management 
Systems engineering and integration 
Other 

Operations 

Launch support 
Mission support 
Training 
Quality control 

Experiment removal and installation 
Experiment integrated test 
Maintenance and refurbishment 
Change and modification kits installation 
Expendables 

Integrated logistics support 

T ransportation 

Program management 

Systems engineering and integration 

Other 





Table 2-2. EOC Breakdown 

Labor Hours 
Labor Dollars 
Material 

Other Direct Costs 
Burdens and Overhead 
General and Administration 
Fee 
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Table 2-3. WBS Elements That Are Part of an ACS 


01 

Structure 

01-02 

Aerosurfaces (all subdivisions) 

02 

Propulsion 

02-01 

Main propulsion 

02-01-07 

Thrust vector control 

02-01-16 

Thrust vector control 

02-02 

Orbit maneuvering 

02-02-07 

Thrust vector control 

02-04 

Attitude control propulsion (all subdivisions) 

03 

Avionics 

03-01 

Guidance and navigation 

03-01-01 

Inertial measurement unit 

03-01-02 

Star tracker 

03-01-03 

Solar tracker 

03-01-04 

Horizon tracker 

03-02 

Stability control 

03-03-01 

Autopilot 

03-03-02 

Control moment gyros 

03-03-03 

Gravity gradients 

03-03-04 

Magnetic moment 

03-05 

Display and control 

03-05-01 

Flight displays 

03-05-04 

Manual control entry 

03-05-06 

Electronics 

! 03-06 

Data management 

03-06-01 

Computer 

03-06-02 

Storage devices 

03-06-03 

Data interface unit 

03-06-04 

Software 

03-07 

Signal distribution (all) 

06 

Power 

02-02 

Fluid 

06-02-01 

Hydraulic 

06-02-02 

Pneumatic 
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a translation matrix will be necessary to convert the functional breakdown to 

WBS. Care will have to be exercised to ensure that no elements are left out 
or repeated. 

2. AEROSPACE DATA BASES 

a. Satellite Cost Data 

Some data is available in-house from a variety of satellite cost pro- 
grams. A number of data collections exist independently, and are used for 
various purposes. A typical data system divides the satellite into a variety 
of subsystems similar to those for REDSTAR, although not identical in its 
breakdown. One data format describes characteristics such as number of 
units, technical characteristics, and weight. A second format describes cost 
data divided into major categories: engineering; development; tooling; manu- 
facturing; quality control; clerical; and other. Unfortunately, little if any 
component data is available. Cost data exist in this data system for the 
following programs: 

(1) VELA 

(2) VASP 

(3) Program 191 

(4) Program 777 

(5) Defense Support Program (DSP) 

(6) Nimbus 

(7) Applications Technology Satellite (ATS) 

(8) Pioneer 

(9) Orbiting Geophysical Observatory (OGO) 

(10) Lunar Orbiter. 

k* Attitude Reference System Data 

As forerunner of the present task, a small effort (Ref. 21) was conduc 
ted in fiscal year 1972 at The Aerospace Corporation to gather data on attitude 
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reference systems that could later be employed to determine relationships 
between the following parameters: 

(1) Technical characteristics 

(2) Safety /reliability 

(3) Cost 

(4) Schedules. 

Data were tabulated on 15 different stabilization units for which 
Aerospace had information available. This material was examined for possi- 
ble relationships between certain parameters* 

Ultimately, development is desired of a model for a complete attitude 
reference system expressing relationships between the following items: 

(1) Technical Characteristics 
. (a) Accuracy 

(b) Power consumption 

(c) Volume 

(d) Weight 

(e) Vibration levels 

(f) Temperature range 

(g) Ambient pressure range 

(h) Functional requirements 

{ 2 ) Safety / Reliab ility 

(a) Failure 

(b) Failure detection 
(3) Cost 

(a) Design and development 

(b) Build and checkout 

(c) Test rigs and vehicles 

(d) Training and simulation 

(e) 10-year support 

(f) Management interface 
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( 4 ) 


Schedules 

(a) Sequence restraints 

(b) Man-loading limitations 

(c) Other. 

In view of the small magnitude of the initial effort (approximately 
1. 5 man-months), gathering data on all the above factors was, of course, 
not possible, and priorities had to be assigned for this first-level effort. 
Accordingly, the tabulation was confined to the parameters listed below. 

These were judged to be the most important and the most likely to show inter- 
relationships. Also, the study was limited to the stabilization package 
portion of the ACSs, since information was available on more of these units 
than on other parts of the system, such as horizon sensors or star trackers. 
The parameters selected were 

(1) Gyro bias drift rate uncertainty 

(2) Weight 

(3) Power consumption 

(4) Reliability 

(5) Recurring cost. 

While the emergence of some definite correlations between cost and 
performance was expected, when accuracy and reliability were plotted against 
cost, no definite trends were generally apparent. Two problems were 
encountered that may contribute to this: first, accurate cost information was 
difficult to obtain, and separation of development costs from recurring costs 
was even more difficult; second, when data were compared, it was found that 
no two units differ in only one characteristic. Thus, in comparing two units 
of different accuracies, there was also a variation of other parameters. 

This study had attempted to use statistical methods to define the relationships 
between performance and cost. As with many statistical approaches, there 
are almost never enough data to satisfy all the theorems necessary to achieve 
sufficient confidence in the results. It was concluded that a very thorough 
breakdown of all cost data will be necessary to achieve the objectives of 
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co st/performance modeling with this approach, and that this information will 
have to be carefully weighed for such factors as maturity of design, number 
of units manufactured, possible future overruns, and influence of concurrent 
programs. In addition, many more parameters will require evaluation if a 
complete model is to be developed. 

C. SPACE VEHICLES DESCRIPTION 

Because this task is concerned with the cost/performance methodol- 
ogy for a three-axis mass expulsion ACS, two vehicles typical of this type, 
the standard Agena and the NASA Space Tug, were reviewed with an emphasis 
on the ACS design. A brief description of the Agena ACS is given, as it is 
typical of a Tug-type vehicle. Also, a review of the Tug control require- 
ments was conducted to ensure that the modeling methodology was closely 
tied to current industry versions of such systems. Both North American 
Rockwell (Ref. 22) and Lockheed (Ref. 23) reports were reviewed to establish 
these requirements. 

1. STANDARD AGENA 

The standard Agena was developed for use in a multistage space 
vehicle as one of the upper stages. It is adaptable to various combinations of . 
program booster, payload, and support hardware. Its mission capabilities 
include functional programming; a single-, dual-, or triple-start propulsion 
system; attitude sensing and control; ground command response; data record- 
ing and telemetry; and payload support. 

The standard Agena Guidance and Flight Control System performs 
the attitude control functions necessary to accomplish the vehicle mission. 
During coasting flight following separation of the Agena from the booster, the 
ACS controls the vehicle to a local vertical orientation. Vehicle attitude is 
sensed by a three-axis inertial reference package (IRP), which is referenced 
to the earth by an infrared horizon sensor and by gyrocompassing techniques. 
Attitude errors are electronically converted to error signals that control 
corrective forces applied to the vehicle by pulsed cold-gas thrust valves. 
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The major components and their functions in this system are 
described in the following sections* 

a. Guidance Module 

The guidance module is located in the forward section of the Agena. 
The module structure assembly is precision-fitted and aligned to each individ- 
ual vehicle. The assembly contains mounting surfaces for the IRP, the 
horizon sensor, and several other components. Each component is optically 
aligned to the module structure assembly, permitting precise alignment of 
the guidance module with the body axes of the vehicle. 

b. Inertial Reference Package 

The IRP is the primary attitude -sensing component of the guidance 
system. It contains three single -degree -of-freedom gyros. The gyro 
input axes are orthogonal and oriented along the body axes of the vehicle 
(roll, pitch, and yaw as defined in Figure D-l, Appendix D). The gyros 
sense angular rotations of the vehicle about the body axes and generate 
attitude error signals. The pitch gyro receives an open-loop pitchover 
command of orbital rate to maintain the vehicle in a constant attitude with 
respect to the earth. For most standard Agena missions, the desired 
vehicle orientation is that in which the nose is forward and the vertical axis 
of the vehicle passes through the eartbds center. 

c. Horizon Sensor 

The horizon sensor, consisting of two infrared-sensitive sensing 
heads and an electronic signal mixer box, provides the IRP with an earth 
reference. The two sensor heads scan the space below the vehicle in conical 
patterns, and detect the discontinuity in the infrared radiation between earth 
and space. The horizon sensor generates pitch and roll output signals when- 
ever the vehicle is misoriented with respect to the local vertical. When the 
vehicle has a roll attitude error, one sensor head obtains a signal for a 
longer period of time than the other. Roll attitude errors are, therefore, 
detected by comparing the output of one sensor head with the other. Each 
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sensor head provides pitch information independently by comparing the earth 
scan with an internally- generated reference pulse. The sensor outputs are 
used to correct the gyros, which, in turn, correct the vehicle. The horizon 
sensor provides the gyros with a long-term earth reference that eliminates 
the accumulation of attitude error due to gyro drifts. 

d. Gyrocompas sing 

Gyrocompas sing is the technique of coupling the horizon sensor roll 
signal into the yaw gyro. Consider a vehicle that has very slowly yawed to 
the right as a result of yaw gyro drift, causing a portion of the orbital angular 
velocity vector to be projected along the vehicle's roll axis. As a result, a 
roll attitude error develops. This roll attitude error is the key to the gyro- 
compassing technique, for the continuing existence of a horizon sensor roll 
signal, assuming negligible roll gyro drift, is an indication of a yaw attitude 
error in the vehicle. Large yaw errors are reduced by coupling the roll 
horizon scanner error signal to the yaw gyro. Since the roll loop responds 
much faster than the yaw loop, any persistent roll error drives the yaw 
attitude error slowly toward null. 

e. Flight Control System 

During coasting periods, the flight control system provides control 
of the vehicle attitude in response to error signals generated by the gyros in 
the IRP. These error signals are processed by the appropriate electronics 
channel in the flight control electronics package, and the corresponding 
pneumatic valves are energized. Compressed gas from the thrust control 
valves provides the energy to correct the vehicle attitude error. Basic com- 
ponents of each channel are an input amplifier, demodulator, lead network, 
integrating amplifier, a pair of Schmitt triggers, and a pair of power stages 
that actuate the pneumatic thrusters. 

2. NASA SPACE TUG 

The Tug is the third stage of the STS; the first and second stages 
are the booster and the orbiter, respectively. The purpose of the STS 
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Program is to reduce the cost of space missions through the reuse of the 
Shuttle and Tug. The main cost reduction is obtained through the return 
and reuse of payloads. The capability of retrieving payloads is the most 
important new operational capability of the STS. If one is to appreciate the 
Tug's attitude control requirements, it is necessary to consider the 
requirements on the Tug itself. 

a. Tug Requirements 

According to the latest issue of the Baseline Tug Definition Document 
(Ref. 24), the Tug must have the capability of delivering a payload to its 
destination, maneuvering to the vicinity of another payload to be returned, 
docking with and capturing the payload, preparing the payload for return, and 
then returning to the Shuttle. 

The Tug is to be designed as an unmanned autonomous vehicle, 
although remote man-in-the-loop TV for final payload docking operations may 
be used as required in conjunction with rendezvous and docking laser radar. 
Although the Tug will be carried by the manned Shuttle, the Tug is to be 
designed for ground-based operation only, with all payload /Tug assembly, 
propellant loading, maintenance repair, and refurbishment to be performed 
on the ground. The design mission life of the Tug is tentatively set for 20 
missions (ground refurbishment of subsystems after each mission is accept- 
able). The Tug is tentatively to be designed for a mission completion proba- 
bility of 0. 97, The design on-orbit stay time is 6 days for each mission. 

(It must also stay 1 additional day in the Shuttle cargo bay. ) Since the major 
concept of the STS is reusability, the Tug itself must be designed so that it 
can be retrieved. 

Since the Tug is a payload relative to the Shuttle, the Tug must 
satisfy all the constraints imposed by the Shuttle, including weight and volume 
(the Tug and payload must fit inside the Shuttle cargo bay), and must also 
satisfy Shuttle environmental characteristics, including loads, thermal, 
acoustic, vibration, and vacuum. The basic Tug requirements are summa- 
rized in Table 2-4. 
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Table 2-4. Tug Requirements 


Mission: 

Payload delivery 
Payload retrieval 
Return to Shuttle 

Guidelines: 

Unmanned operation 


Ground-based support only 

f 

97% mission completion probability 
On-orbit staytime of 6 days 


Retrieval of the Tug 

> 

Shuttle Interface: 

Satisfaction of constraints imposed by Shuttle 
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b. 


Tug Control Requirements 


The control system must provide attitude control of the Tug during 
separation from the Shuttle. An auxiliary propulsion system (mass expulsion) 
is used for three-axis control during all Tug mission phases, except during 
powered flight (main engine burns). During powered flight, ,the main engine 
is gimbaled by electromechanical servoactuators for pitch and yaw control, 
while roll control is provided by the auxiliary propulsion system (as during 
non-powered flight). Attitude control includes attitude maneuvering (reorien- 
tation). The control system must also provide relative position and velocity 
control during rendezvous and docking maneuvers (with a payload and with 
the Shuttle). The basic Tug guidance, navigation, and control requirements 
are summarized in Table 2-5. 

c. Baseline Tug Control Subsystem Configuration 

Reference 24 specifies a baseline Tug control subsystem configuration 
consisting of the equipment listed in Table 2-6 to perform the above control 
requirements. This configuration was selected after several preliminary 
design studies by North American Rockwell Space Division and by McDonnell 
Douglas Astronautics Company. Table 2-7 describes the control avionics 
components of the baseline configuration as selected by North American 
Rockwell (from Ref. 22). NASA's Baseline Tug Definition Document (Ref. 24) 
does not include any avionics performance data. 

Actuator sizing data depends on the mass properties of the Tug (with 
and without a payload). Table 2-8 presents the baseline mass properties. 

Based on these mass properties, Tables 2-9 and 2-10 present the thruster 
and thrust vector control requirements. Table 2-11 presents the docking 
accuracy for docking with a three-axis controlled payload (and with the 
Shuttle). The docking requirements for docking with a spinning payload have 
not yet been established. 
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Table 2-5* Tug Guidance, Navigation, and 
Control Requirements 


Determine linear and rotational position and velocity of tug 
Provide attitude control (including three-axis maneuvering) 


Provide position and velocity control during rendezvous and 


docking 

Table 2-6. 

Baseline Tug Control System Components 

Sensors: 

Inertial measurement unit 
Star tracker 
Horizon sensor 
Auto collimator 
Laser radar 
TV camera 

Actuators : 

Main engine thrust vector control actuators 
(pitch and yaw) 

Thrusters (three-axis rotational and 
translational) 

Computer: 

( For processing sensors, computing actuation 
signals, and monitoring performance) 

Electronics: 

(For interfacing among sensors, actuators, 
and computer) 
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Table 2-7. Control Avionics Component Characteristics Summary 


Component 

Performance 

Requirements 

(3<J) 

Function 

No. per 
Vehicle 

Redundancy 

Level a 

W eight 

Power 

(W) 

1. Strapdown, 6-axis 
Inertial Measurement 
Unit (including pre- 
processor) 


Provides short-term inertial 
attitude and state vector 
information 

1 

FO/FO/FS 

29. 5 kg 
(65 lb) 

144 

Random drift 
G-sensitive drift 

±0. 1 0 /hr 
±0. 3 0 /hr /g 

Provides angular rate infor- 
mation for vehicle stabiliza- 
tion and control 





Acceleration bias drift 
G-sensitive bias 

±0. 00061 m /sec'' 
(±0* 002 ft/sec 2 ) 

±0. 00183 m/ sec*' /g 
(±0, 006 ft/sec 2 /g) 

Preprocessor provides coor- 
dinate transformation and 
failure detection and isolation 





2. Gimbaled Star 
Tracker 


Provides attitude update to 
the inertial measurement 
unit 

2 

FO/FS 

H.3 kg 
(25 lb) 

18 

Azimuth and elevation 
error 


Provides star angle infor- 
mation for star/horizon navi- 
gation (state vector update) 





3. Earth Horizon Tracker 
System accuracy 
Altitude range 

Tilt range 

1 85-46, 300 km 
(100-25, 000 nmi) 

±5° 

Provides earth local verti- 
cal information for star/ 
horizon navigation (state 
vector update) 

Provides a source of derived 
altitude information 

1 

FO/FS 

20. 4 kg 
(45 lb) 

38 [ 

4. Scanning Laser Radar 
Range 

92. 5 km 
( SO nmi) 

Determines range, range 
rate angle, and angular rate 
of target with respect to OOS 

2 

FO/FS 

20. 4 kg 
(45 lb) 

155 

Range accuracy 
‘ Range rate 

± 1 0 cm or 0. 02% 

0 to 1100 m /sec 
(0 to 0. 6 nmi /sec) 

Determines target attitude 
and attitude rate with respect 
to line of sight of radar 





Range rate accuracy 

±1. 0 cm or 1 . 0% 







a FO - Fail Operational 
FS = Fail Safe 




Table 2-7. Control Avionics Component Characteristics Summary (Continued) 
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Table 2-8. Baseline Tug Mass Properties 




With 1360-kg Payload 

Without Payload 



Momei 

it of "inertia 


Moment of Inertia 

Configuration 

W eight 

RoU 

Pitch./ Y aw 

Weight 

RoU 

Pitch/ Yaw 

Tug Full of Pro- 
pellant 

Propellant Expended 

29,500 kg 
(65, 000 lb) 

4080 kg 
(9000 lb) 

9720 kg-m 2 
(7165 
slug — ft** ) 

9 710 kg-m 2 
(7155 ? 
slug-ft ) 

221, 000 kg-m 2 
(163,000 
slug-ft*) 

117, 000 kg-m 2 
(86, 000 
slug-ft 2 ) 

28, 100 kg 
(62, 000 lb) 

2720 kg 
(6000 lb) 

6130 kg-m" 
(4525 - 
slug-ft ) 

6110 kg-m 2 
(4510 
slug-ft 2 ) 

80, 000 kg-m Z 

(59,000, 
slug-ft ) 

25, 800 kg-m 2 
(19, 000 ? 
slug- ft ) 


Table 2-9. Thruster Requirements 

(Auxiliary Propulsion System) 


Number of Thrusters 

16 ; 

Propellant 

go 2 /gh 2 

Thrust 

134 N (30 lb f ) 

Specific Impulse 

3740 N-sec/kg 
( 38 0 lb^- sec /lb) 

Total Impulse 

781, 000 N-sec 
( 175, 500 lb^-sec) 

Auxiliary Propulsion System 

258 kg (568 lb) 

Table 2-10. Thrust Vector 

Control Requirements 

Control Gimbal Angle 

±3 deg 

Actuator Gimbal Capability 

±5 deg 

Engine Gimbal Rate 

±5 deg/sec 

Engine Control Acceleration 

±1 rad/sec^ 

Bandwidth 

10 Hz 

Duty Cycle 

45 min per mission 

Gimbaled Weight 

135 kg (298 lb) 


Table 2-1 i. Docking Accuracy Requirements 

(For Docking With Three -Axis Controlled Payload) 


Centerline Miss Distance 

±0. 229m (±0* 75 ft) 

Miss Angle 

±1 deg 

Axial Velocity 

0. 0305 to 0* 305 m/sec 
(0* 1 to 1, 0 ft/sec) 

Lateral Velocity 

±0- 09 1 5 m / sec 
(±0, 3 ft/sec) 

Angular Velocity 

±0* 5 deg/ sec 
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3. MODELING TECHNIQUES AND APPROACHES 


A. INTRODUCTION 

In Section 2, various modeling techniques and approaches were 
reviewed to assess their utility for developing a Cost/Performance Model. 

As a result of that review, it became apparent that a top-down approach, re- 
gressing on historical attitude control system (ACS) data, would add little to 
advance cost-predicting techniques. Instead, a group of control system engi- 
neers, with support from cost analysts, was chosen to develop a cost-pre- 
diction approach that reflected the views of the control engineers designing 
the ACS. During this conceptual phase, a number of modeling methodologies 
were conceived and evaluated. So that each modeling approach could be 
judged in a complete and objective manner, the following criteria were for- 
mulated and used to evaluate the utility of each approach: 

1. The prime objective is to determine sensitivity of cost 
to changes in functional requirements. 

2. The modeling methodology must not impose a cumber- 
some cost-reporting structure on the contractor. 

3. The modeling methodology must estimate cost from the 
design and development phase through the entire pro- 
gram life of the system. 

4. The model should be adaptable to current design pro- 
cedures and tradeoff procedures. 

5. The model should be capable of achieving a balanced 
vehicle design by a simple extension of the system 
methodology. 

Of all the models considered during this phase, only three were 
developed in sufficient detail to be described in this section. The initial 
approaches to the modeling task considered modeling the flow of a design 
process. Consideration of the design process led to modeling approaches 
typified by the approach discussed in Section 3.B. Another modeling approach, 
described in Section 3. C, involved selection of equipment configurations based 
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on system requirements. With the above approaches as prerequisites, 
another model, termed the "minimum model," was developed; this model is 
described in Section 3. D. The adjective "minimum" was used to describe 
this model because it considered, but did not adequately quantify, the parame- 
of performance, safety, cost, and schedule of an ACS. The "minimum" 
model was later expanded and became the Cost/Performance Model. 

B. DESIGN PROCESS FLOW CHART MODEL 

Initial approaches considered modeling of the design process. As a 
first step, an overall flow chart of the major design phases was developed. 
(See Figure 3-1. ) A more detailed flow chart of the design process is pre- 
sented in Figure 3-2. In addition, the activities performed during each major 
phase were considered. (See Table 3-1.) 

Using the flow chart of the design process as a starting point, one 
could obtain a method for estimating the cost and schedule for an ACS by esti- 
mating the man-hours required to generate specific design output. A flow 
chart of this model approach is presented in Figure 3-3. Each subsystem 
requirement is an input to a serial set of blocks representing the tasks identi- 
fied by the design, analysis, detailing, manufacturing, and test process flow. 
Each task block contains a set of functional representations of man-hours 
versus time associated with each block output. The man-hours-versus-time 
functions will, in general, be functions that peak early in time, as is typical 
of most programs. A simple summation gives the overall subsystem man- 
hours. The functional relationships could be quantified through the use of 
individual data constants and any constraints imposed on man-hours or 
schedule. Since a true design does not evolve from a sequence of independent 
serial paths, a more sophisticated model with feedback and coupling between 
requirements is necessary. 

The form of the data required to develop this modeling approach 
imposes a cumbersome cost reporting structure on the contractor. For this 
reason, aLthough the detailed flow charts provided insight into the develop- 
ment of schedule relationships, it was not considered useful to continue fur- 
ther development along these lines. 
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Figure 3-2. Flow Chart of the Design Process (Continued) 
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Table 3-i. Major Design Phases 


Proposal 

Determine system requirements to satisfy payload functional 
requirements 

Estimate preliminary cost and schedule 

Preliminary Design and System Analysis 
Program plans: 

Master program plans 

Subsystem specifications and requirements (end-item) 

Test plans, manufacturing plans, quality assurance 
plans, reliability plans, engineering development plans 

Interface with other subsystems, vehicle and ground 
support equipment 

Subcontractor plans and specifications 
Quality test plans 

Mechanical layouts, mathematical block diagrams , interface 
control diagrams, detailed drawings, long-lead items, 
functional block diagrams, schematics 

Analysis (stability, error, simulation, structure, thermal, 
reliability, circuit) 

Design (electrical, mechanical) 

Contractor liaison 

Subsystem program management 

Subsystem Analysis, Design, and Breadboard Testing 

Program plans maintenance (The program plans developed 
during the preliminary design and system analysis must be 
maintained. ) 

Diagrams, layouts, schematics, long-lead items 

Analysis (same categories in previous phase, with emphasis 
now on circuit analysis) 

Design (electrical, mechanical) 
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Table 3-1. Major Design Phases 
(Continued) 


Subsystem Analysis, Design, and Breadboard Testing (Continued) 
Breadboard fabrication and tests 
Quality assurance (box level tests) 

Product engineering and manufacturing liaison 
System test liaison 

Prototype Design, Fabrication, and Test 
Prototype design and fabrication 
Prototype test 

FREEZE DESIGN 

Conclude whether the subsystem design will meet all require- 
ments; if not, determine what compromises exist in terms of 
performance, safety, cost, and schedule. Freeze design, and 
begin production engineering. 

Subsystem Production Engineering, Fabrication, and Test 

Production engineering, fabrication, and test 

Prove out final engineering drawings, specifications, 
tooling, and tests to minimize production problems 

System Integration and Test 

Flight Test Phase ( 1 to 5 flights) 

Initial Operational Phase (next 20 flights) 

Operational Phase (remaining years of program) 
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Figure 3-3. Simplified Subsystem Design Process Flow Chart 





C. DESIGN SELECTION MODELS 

A series of approaches was developed that attempted to model the 
actual design selection. (See Figure 3-4. ) The concept is to enter the model 
with payload requirements. Component data tables are then searched to 
determine which attitude control sensors are capable of meeting the payload 
requirements. Similarly, a search is made to identify the type of applicable 
actuators. Typical attitude reference sensors are listed in Table 3-2; typical 
control actuators are listed in Table 3-3. The ACS requirements are derived 
from the payload requirements. Typical payload requirements are presented 
in Table 3-4. 

In operation, the model would be employed for a preliminary sorting 
of components, based on accuracy. Reference accuracy would be divided into 
the following discrete categories (for example): 

1. High accuracy (less than 0. 05° at update) implies star 
reference, except that two-axis sun information can be 
obtained to this accuracy. 

2. Medium accuracy (0.05° to 0. 2°) permits use of earth 
sensors . 

3. Coarse accuracy (0. 2° to 2°) permits use of ion 
sensors. 

4. Very coarse accuracy (2° to 10°) permits use of 
magnetometers. 

Examples of control accuracy requirements and their implications might be 
as follows: 

1. Precise pointing and tracking requirements, which 
imply momentum- exchange actuators 

2. Jitter requirement less than 0. 01°, which eliminates 
dual spin, unless an on-orbit balancing device is to be 
used. 
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Figure 3-4. Design Selection Model 




Table 3-2. Types of Attitude Reference Sensors 


I. Long 

-Term or Update Sensors 

A. 

Star sensors 


1 . Star tracker 


a. Electronic 

b. Gimbaled 


2. Fixed star sensor 

B. 

Horizon sensors 


1. Energy balance 

2. Edge tracker 

3. Scanner 

C. 

Sun sensors 

D. 

Magnetometer 

E. 

Ion sensor 

II. Short 

-Term Attitude Reference 

A. 

Inertial 


1 . Strapdown 

2. Platform 

B. 

Dynamics (as in spin stabilization) 

C. 

Math model of dynamics 

— 1 
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Table 3-3. Types of Control Actuators 


I. 

II. 

III. 

IV. 

V. 

VI. 

VII. 




Reaction Jets 


Reaction Wheels /Momentum Wheels 


Control Moment Gyros 

A. Single -gimbal 

B. Double -gimbal 

Spin Stabilization 

A. Single- spin 

B. Dual- spin 

Gravity Gradient 
Magnetic 
Solar Pressure 
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Table 3-4. Types of Requirements 


I. Performance 

A. Attitude orientation 

1. Spacecraft 

a. Pointing 

b. Tracking 

c. Maneuvering 

2. Payloads, sensors, and appendages 

a. Pointing 

b. Tracking 

c. Slewing 

d. Scanning 

B. Accuracy 

1. Control accuracy 

a. Rate 

b. Attitude 

2. Reference accuracy 

a. Rate 

b. Attitude 

C. Orbit considerations 

1 * Altitude 

2. Ellipticity 

3. Inclination 

4. Injection 

5. Stationkeeping 

6. Orbit adjust 

D. Power 

E. Weight 

F. Volume 

G. Autonomy 

H. Lifetime/ reliability 

II- Others 
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equirements, such as payload scanning or pointing, would be considered 
his stage. For example, the payload pointing requirement would dictate 
tellite orientation. Thus, if the payload is earth-pointing, the satellite 
d probably be earth-oriented, implying earth sensors (unless the accu- 
racy requirement is too tight). In other cases, dissimilar multiple payload 

subsystem) pointing requirements may require a stabilized platform 
to be used as a base from which the different sensors may be pointed. If the 
have scanning requirements, the desirability of providing the scan 
motion with a portion of the vehicle must be considered. 

Similarly, the effects of orbit requirements would be brought into 
the design selection. In a low- altitude earth orbit, significant control effort 
is required because of aerodynamic torques. The need for a low-altitude earth 
bit would rule out the use of approaches such as gravity gradient, magnetic 
torquing, or solar torques. If orbit adjustment or stationkeeping is needed, 
then the ACS must be able to overcome the disturbance produced by the device 

used to achieve the velocity increment. This is often accomplished by spin 
stabilization. 

This design selection model was developed somewhat further into the 
selection methodology depicted in Figure 3-5. Identification of standard con- 
figurations for ACSs was a necessary part of this modeling methodology. 
Therefore, a preliminary tabulation of standard configurations was made. 

(See Table 3-5. ) For each system requirement, a search would be per- 
formed on all the stored standard configurations, as indicated in Table .3-6. 

After filtering through all control system requirements shown ini Table 3-7, 
the remaining configurations that meet all requirements would bl used as 
candidate configurations. In this approach, similar data tables would be 
developed for each sensor (e. g. , earth sensor and gyro) and for each actuator 

(e.g. , thrusters and reaction wheels). Typical component requirements are 
shown in Table 3-8. 

The design selection models were developed further. The results of 
this model development generated the model described in Section 3.D.\ 


i 

i 
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Table 3-5. Standard ACS Configuration 


Coniieu ratio- 


Configuration Components 



No. 

Sensors 

Actuators 

Electronics 

Proce Ssor 

Comments 

1 

3 -axis gyro reference 
2-axis earth sensors 

3 -axis thrusters 

2 - axis engine gimbal 
actuators 

Sensor processing 
Signal shaping 
Gain selection 

Signal conditioning 
{for telemetry) 

Thruster drives 
Gimbal drives 


Basic Agena configuration 

2 

3-axis gyro reference 
2-axis earth sensors 

Reaction wheel 
tachometers 

3-axis thrusters 

2 - axis engine gimbal 
actuators 

3 - axis reaction wheels 

Sensor processing 
Signal shaping 
Gain selection 

Signal conditioning 
{for telemetry) 

Thruster drives 
Gimbal drives 
Reaction wheels 
Unloading Logic 
Wheel drives 


Modified basic Agena 
configuration 

3 

3-axis gyro reference 
2-axis earth sensors 

Control moment gyro 
tachomete rs 

Gimbal angle 
resolve rs 

3-axis thrusters 

2 - axis engine girnbai 
actuators 

3 - axis control moment 
gyros 

Sensor processing 
Signal shaping 
Gain selection 

Signal conditioning 
(for telemetry) 

Thruster drives 
Gimbal drives 
Wheel drives 

Unloading logic (control 
moment gyro gimbals) 


Modified basic Agena 
configuration 

■ 

3 -axis gyro reference 
2-axis earth sensors 

2 -axis star tracker 
(gimbaled) 

2-axis autocollimator 

3-axis thrusters 

2 -axis engine gimbal 
actuators 

Thruster drives 

Signal conditioning 
(for telemetry) 

Gimbal drives 

Sensor processing 
Mode and gain 
Signal shaping 
Safety monitoring 

Baseline Tug design 
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Table 3-5. Standard ACS Configuration (Continued) 


Configuration 
; No. 

Configuration Components 

Sensors 

Actuators 

Electronics 

Proces sor 

Comments 

5 

/ 

3-axis gyro reference 
2-axis earth sensors 

2 - axis star tracker 
(gimbaled ) 

2-axis autocollimator 

Reaction wheel 
tachometers 

3 -axis thrusters 

2- axis engine gimbal 
actuators 

3 - axis reaction wheels 

Thruster drives 

Signal conditioning 
(for telemetry) 

Gimbal drives 
Wheel drives 

Reaction wheel 
unloading logic 


Modified baseline Tug 
design 

6 

3-axis gyro reference 
2-axis earth sensors 

2-axis star tracker 
(gimbaled) 

2-axis autocollimator 

Control moment gyro 
tachometers 

3 - axis thrusters 

2 - axis engine gimbal 
actuators 

3 - axis control moment 
gyros 

Thruster drives 

Signal conditioning 
(for telemetry) 

Gimbal drives 
Wheel drives 

Unloading logic (control 
moment gyro gimbals) 


Modified baseline Tug 
design 

7 

2- axis earth sensors 
Polaris sensor (yaw) 

3- axis gyro reference 

3-axis thrusters 
3- axis reaction wheels 

Thruster drives 
Wheel drives 

Signal conditioning 
(for telemetry) 

Sensor processing 

Mode and gain 
switching 

Reaction wheel 
unloading logic 

Self-test I 

Primary mode of 
Applications Tech - 
nology Satellite 
(ATS) F and G 

8 

2-axis earth sensors 

Sun sensor and gyro 
(yaw) 

Reaction wheel 
tachometers 

3 -axis reaction wheels 

2-axis thrusters (for 
reaction wheel unloading) 

Sensor processing 
Wheel drives 
Thruster drives 
Unloading logic 
Signal shaping 

Signal conditioning 
(for telemetry) 

! 

Primary mode of 
Nimbus D 

9 

2-axis earth sensors 

Yaw sun sensor (on 
oriented array) 

Reaction wheei 
tachometers 

3-axis reaction wheels 

2-axis thrusters (for 
reaction wheel unloading) 

Sensor processing 
Wheel drives 
Thruster drives 
Unloading logic 
Signal shaping 

Signal conditioning 
{for telemetry) 


Normal mode of 
Orbiting Geophysical 
Observatory (OGO) 
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Table 3-5. Standard ACS Configuration (Continued) 


Coniigu ration 


Configuration Components 



No. 

Sensors 

Actuato rs 

Electronics 

Processor 

Comments 

10 

2 -axis earth sensors 

Reaction wheel 
tachometers 

Gimbal angle 
resolvers 

Double -gimbaled pitch 
momentum bias wheel 

2 -axis thrusters 
(for unloading) 

Sensor processing 
Wheel drives 
Gimbal drives 
Thruster drives 
Unloading logic 
Signal shaping 

Signal conditioning 
(for telemetry) 


Normal mode of 
gimbaled reaction wheel 
attitude stabilization 
package (GRASP)- -TRW 
Comsat design 

1 1 

2-axis earth sensors 

Reaction wheel 
tachometer 

Gimbal angle resolver 

Single-gimbal pitch 
bias wheel 

2-axis thrusters 
(for unloading) 

Sensor processing 
Wheel drive 
Gimbal drive 
Thruster drives 
Unloading logic 
Signal shaping 

Signal conditioning 
(for telemetry) 


Basic normal mode of 
Lincoln Experimental 
Satellite (LES)-7 

12 

2-axis earth sensors 

Reaction wheel 
tachometers 

Pitch momentum bias 
wheel 

2-axis thrusters (pitch 
and offset roil/yaw) 

Sensor processing 
Wheel drive 
Thruster drives 

Unloading logic 
(pitch only) 

Signal shaping 

Signal conditioning 
(for telemetry) 


Canadian Technology 
Satellite 

13 

2-axis earth sensors 

Reaction wheel 
tachometers 

r Large pitch momentum 
wheel 

2-axis thrusters (wheel 
unloading and spin axis 
correction) 

Nutation damper 

Sensor processing 
WheeL drive 
Thruster drives 

Signal shaping 
(pitch only) 

Signal conditioning 
(for telemetry) 


Pure pitch momentum 
bias stabilization 
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Table 3-5. Standard ACS Configuration (Continued) 


Configu ration 
No. 

Configuration Components 

Sensors 

Actuator s 

Electronics 

Processor 

Comments 

14 

Single-axis earth 
sensor 

Single-axis spin sun 
sensor 

Reaction wheel 
tachomete r 

Large reaction wheel 

Transverse and spin 
thrusters 

Sensor processing 
Wheel drive 

Thruster drives 
Signal shaping 

Signal conditioning 
(for telemetry) 


Normal mode of 647 
design 

IS 

Spin earth sensor 
(2 - axis ) 

Rotor angle sensor 

Despin mechanization 

assembly 

Nutation damper 

Thrusters (for spin 
axis correction) 

Sensor processing 
Despin drive 
Thruster drives 

Signal shaping (despin 
loop only) 

Signal conditioning 
(for telemetry) 


Normal mode of 777 
and Tactical Communi- 
cations Satellite 
(TACSAT) (dual -spin) 

16 

Spin sun sensor 
(2-axis) 

Nutation damper 

Thrusters (for spin 
axis correction) 

Thruster drives 

Signal conditioning 
(for telemetry) 


Pure spinner with 
thruster 

17 

Spin sun sensor 
12-axis ) 

Nutation damper 
Magnetic torquers 

Coil drives 

Signal conditioning 
(for telemetry) 


Normal mode of Space 
Experimental Satellite 
Program (SESP)-72 

18 


Pitch momentum bias 
wheel 

Passive damper 

Wheel period timer 

: Wheel drive (constant 

speed) 

Signal conditioning 
(for telemetry) 


Pitch momentum bias 
with gravity gradient 
unloading 
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Table 3-6. Configuration Selection Matrix 


Control System Requirements a 







Standard 

Configurations 

b 





1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

I- Acquisition 



















A . 

Initial position (deg) 




















1. Small (<10) 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 


2. Limited (<90) 




X 

X 

X 




X 










3. Arbitrary 




X 

X 

X 




X 









B. 

Initial rate (deg/sec) 




















1 . Low (<0. 1 ) 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 


2* Medium {0. 1 to 1) 

X 

X 

X 

X 

X 

X 




X 










3. High (>1) 

X 

X 

X 

X 

X 

X 













C. 

Acquisition time (min) 




















1. Very Long (>240) 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 


2. Long (30 to 240) 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 


X 

X 

X 

X 

X 


3, Medium (1 to 30) 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 










4. Short (<1) 

X 

X 

X 

X 

X 

X 













II. Rate Recovery 



















A. 

Initial rate (deg/sec) 




















1 . Low {<0, 1 ) 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 



2. Medium (0. 1 to 1 ) 

X 

X 

X 

X 

X 

X 

X 

X 

X 

X 










3. High (>1) 

X 

X 

X 

X 

X 

X 














cl 

Control System Requirements continued in Table 3-7 
^As defined in Table 3-5 



Table 3-7. Control System Requirements for 
Configuration Selection 


I. Acquisition 

A. Initial position 

B. Initial rate 

C. Acquisition time 

II. Rate Recovery 

A. Initial rate 

B. Settling time 

III. Attitude Hold 

A. Attitude reference 

1. Earth 

a. Nadir 

b. Offset 

2, Sun 

a. Center 

b. Offset 

3. Star 

a. Single star 

b. Multiple stars 

4, Inertial 

B. Orbit attitude 

C. Orbit ellipticity 

1. Near circular 

2. Medium ellipticity 

3. High ellipticity 

D. Orbit inclination 

1. Near equatorial 

2. Medium inclination 

3. Near polar 




Table 3-7. Control System Requirements for 
Configuration Selection (Continued) 



E. 

Two axes pointing accuracy 



1. Position 

2. Rate 


F. 

Third axis pointing accuracy 

1 . Position 

2. Rate 

IV. 

Maneuvers 


A. 

Number of axes 


B. 

Maneuver rate 

V. 

Stationkeeping Control 


A. 

Disturbance torque level 


B. 

F iring duration 

VI. 

Powe 

red Flight Control 


A. 

Disturbance torque level 


B. 

Burn duration 


C. 

Thrust vector accuracy 

VII. 

Reliability 

VIII. 

Telemetry and Command 


A. 

Number of telemetry signals 


B. 

Number of commands 
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Table 3-8. Requirements for Component Selection 


I. 

Earth Sensor 


A. 

Accuracy 


B. 

Operational altitude 


C. 

Reliability 


D. 

Noise 


E. 

Time constant 


F. 

Scan offset capability 


G. 

Number of axes sensed 


H. 

Sun and moon intrusion logic 

II. 

Gyro 



A. 

Drift rate 


B. 

Reliability 

III. 

Sun S 

ensor 


A. 

Accuracy 


B. 

Reliability 

IV. 

Star Tracker 


A. 

Accuracy 


B. 

Reliability 

V. 

Thruster 


A. 

Thrust level 


B. 

Minimum on-time 


C. 

Life 

VI. 

Reaction Wheel 


A. 

Peak torque 


B. 

Angular momentum storage 


C. 

Life 





Table 3-8. Requirements for Component Selection 
(Continued) 


VII. Control Moment Gyro 

A. 

Peak torque 

B. 

Angular momentum storage 

C. 

Life 

VIII. Process Electronics (Digital) 

A. 

Memory 

B. 

Word length 

C. 

Cycle time 

D. 

Reliability 

E. 

Hardened memory 

F. 

Input/output channels 
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D. MINIMUM MODEL 


With the modeling experience obtained from the design process flow 
chart model described in Section 3. B, and the design selection model de- 
scribed in Section 3. C, the minimum model, incorporating their assets, was 
developed and is shown in Figure 3-6. The model was termed the "minimum 
model, " since, as a minimum, it would consider, but did not adequately 
quantify, the performance, safety, cost, and schedule of an ACS. 

Starting with the functional payload requirements, a sorting algorithm, 
as shown in Table 3-9, is used to determine an attitude control method such 
as gravity gradient, magnetic control, mass expulsion, momentum storage, 
or spin stabilization. Once the basic control method is established, various 
methods of configuring the design are considered. The next step is to search 

through component data and to select components that satisfy the performance 
requirements. 

It is apparent that some technique must be devised for selecting the 
hardware. In addition, the problem of component redundancy and centraliza- 
tion has to be considered in the design. If the model is to be complete, it 
must consider the impact of the selected hardware on the other vehicle 
systems. At this stage of the modeling, the details for implementing the 
model were not established. The minimum model was expanded as described 
in Section 4, and became the Cost/Performance Model later used to obtain 
sample calculations on trade studies. 
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Figure 3-6. Minimum Model 
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Table 3-9. Sorting Matrix 



Attitude Control Methods 3 - 

Functional and 
Technical Requirements 

Gravity 

Gradient 

Magnetic 

Control 

Mas s 
Expulsion 

Momentum 

Storage^ 

Spin 

Stabilization 

Earth Orientation 

Yes 

Yes 

Yes 

Yes 

No 

Inertial Orientation 

No 


Yes 

Yes 

Yes 

Sun Orientation 



Yes 

Y es 

Yes 

185- to 550-km Orbits 

No 


Yes 

Yes 

Yes 

550- to 37, 000-km Orbits 

Yes 

Yes 

Yes 

Yes 

Yes 

37, 000-km + Orbits 

No 

No 

Yes 

Yes 

Yes 

2- to 10-Deg Accuracy 

Yes 

Yes 

Yes 

Yes 

Yes 

0. 2- to 2. 0-Deg Accuracy 

No 

Yes 

Yes 

Yes 

Yes 

0.01- to 0. 2 -Deg Accuracy 

No 

No 

Yes 

Yes 

Yes 

0, 1-Arc-Sec to 0, 01-Deg 
Accuracy 

No 

No 


Yes 

Yes 


a Yes: can be used 

No: cannot be used 

Blank: will not provide this function alone, but may be helpful 

b 

Momentum storage devices cannot be used without an auxiliary torque-producing 
system. 




4. COST /PERFORMANCE MODELING METHODOLOGY 


The modeling approaches that were discussed in Section 3 did not 
provide quantitative relationships among the performance, safety, cost, and 
schedule parameters for an attitude control system (ACS). When both the 
top-down and bottom-up approaches were considered, it was decided that a 
costing methodology oriented from the bottom up could lead to a model 
employing quantitative expressions that could determine performance and 
cost sensitivities. It was realized that a set of basic equations, termed 
Ma gg[ re ga-te equations," could be written that describe the performance, 
safety, cost, and schedule of the ACS in terms of the equipment used in a 
selected configuration. The equations were termed as "aggregate equations," 
since the independent variables that describe the ACS were "aggregated" into 
fundamental relationships to the elements of performance, safety, cost, and 
schedule. For example, the aggregate equation for the pointing accuracy of 
a typical three -axis ACS considers variables such as attitude sensor noise 
and misalignment, gyroscope drift and misalignment, signal processor 
noise, and control system deadband. Each of these variables is multiplied 
by a computed sensitivity coefficient and combined in a worst case and/or 
root- sum- square (RSS) manner to form the aggregate equation for the ACS 
pointing accuracy. One aggregate equation will be developed for each varia- 
ble in Table 1-1 to form the set of aggregate equations for a particular control 
system configuration. 

Aggregate equations in conjunction with the minimum model elements 
described in Section 3 were used to develop the Cost/Performance Model. 

The flow diagram for this model is shown in Figure 4-1. Starting with the 
payload functional requirements, a filtering technique (search/sort/filter) 
similar to that described in Section 3. C is used to determine an attitude con- 
trol method (such as a gravity gradient, mass expulsion control, momentum 
storage, or spin stabilization) that will satisfy the functional requirements. 
The selection of an attitude control method is made because each different 
ACS configuration has its own set of aggregate equations. 
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Figure 4-l« Cost/Performance Model 




Once candidate control methods are determined, the type of 
equipment needed to mechanize the ACS can be selected by iteration. 
Accessing a data base consisting of all the ACS components suitable for 
this control method, the model first inserts the cheapest component into 
the pointing accuracy aggregate equation, assuming a low-cost ACS is 
our objective, and computes the pointing accuracy. If the pointing accuracy 
is poorer than desired, the model then selects the next least expensive com- 
ponents, iterating until the desired pointing accuracy is met. The next step 
is to use the safety aggregate equations to evaluate those hardware configura- 
tions that have met or exceeded the desired pointing accuracy requirement. 
The failure rate aggregate equations determine the necessary level (and con- 
figuration) of redundancy to satisfy the payload and mission success proba- 
bility requirements. Thus, for a given configuration, a set of applicable 
components is chosen (based, for example, on minimum cost) from the data 
base that satisfies the performance and safety requirements. The next step 
is to compute the power dissipated by the ACS, and the weight and volume of 
the ACS. It would also be possible to iterate to minimize other parameters, 
such as weight or complexity. In addition, the total system cost and sched- 
ule can also be determined as a function of the selected equipment. One 
desirable feature of this aggregate equation approach is the ability to estab- 
lish sensitivities to changes in requirements. One need only change the per- 
formance requirement (for example, pointing accuracy) and let the process 
iterate again to produce the new results. 

The following sections describe the major elements of the Cost/ 
Performance Model in detail. Section 4. A describes the search/sort/filter 
technique that selects an attitude control method based on a set of perform- 
ance requirements; this is essentially an expansion of the technique indicated 
by Table 3-9. Also presented in Section 4. A are descriptions of the various 
control methods and their capabilities. 

Section 4. B develops the more detailed information required to write 
performance aggregate equations for various ACS configurations. Functional 
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block diagrams are given for attitude control configurations for several 
classes of vehicles. The detailed functional requirements, based on pay- 
load requirements and orbital considerations, are presented. Particular 
emphasis is given to a three-axis mass expulsion ACS, which is the base- 
line system for this study. 

Sections 4.C through 4.F present the sample performance, safety, 
cost, and schedule aggregate equations for a specific ACS. The sample per- 
formance aggregate equations developed in this report consider the parame- 
ters of pointing accuracy, power, weight, volume, thermal specification, 
vibration specification, and ambient pressure specification for a three-axis 
mass expulsion ACS, The safety aggregate equations compute the failure 
rate, failure detection probability, and false alarm rate for an ACS. The 
cost aggregate equations determine the total cost of the ACS by considering 
six cost categories: design and development, build and checkout, test hard- 

ware, training and simulation, program life, and management. The schedule 
aggregate equations determine the amount of time required to develop an 
operational ACS starting with the proposal phase, 

A. SEARCH/SORT/FILTER TECHNIQUE 

This section discusses the methodology used to develop the search/ 
sort/filter technique that selects an attitude control method based on a set 
of requirements for the ACS. In the development of the search/sort/filter 
technique, the usual problem of attempting to find a system that meets cer- 
tain requirements was inverted. The approach is based on the existence of 
only a finite number of attitude control methods. Using this knowledge, one 
may work backward to determine what requirements each individual method 
meets or exceeds. Once the requirements have been tabulated for all the atti- 
tude control techniques, sorting the possible attitude control techniques by 
searching through the requirements is a straightforward problem. The fil- 
ter output is the one or more control techniques appropriate for the mission 
under consideration. 
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Sections 4. A. 1 through 4. A. 4 describe the method in greater detail. 
First, the general requirements placed on an ACS are categorized. Second, 
the attitude control techniques are classified. Then, the capabilities of each 
technique are described. The results are summarized as a selection matrix. 
* The section concludes with an example illustrating the search/sort/filter 
technique. 

1. SUBSYSTEM REQUIREMENTS 

All ACS requirements originate from the character of the mission 
and the nature of the payload. The mission and payload requirements deter- 
mine the destination of the spacecraft, the duration or lifetime of the vehicle, 
the nominal orientation, the attitude and attitude accuracy of the ACS, and 
the stationkeeping and reorientation requirements. The mission and payload 
provide coarse estimates of vehicle size and inertia characteristics. They 
also determine the necessary pointing requirements for solar arrays or data 
telemetry. ACS requirements derived from the basic mission and payload 
are categorized into four groups: 

a. Orbital characteristics 

b. Orientation requirements 

c. Accuracy requirements 

d. Vehicle characteristics. 

Table 4-1 subdivides these four categories into further detail. 

In general, multiple control methods may seem appropriate for a 
given set of ACS requirements. Therefore, some rationale is necessary for 
choosing among the possible candidates. This rationale is provided by func- 
tional requirements; the performance specifications provide quantitative 
criteria for tradeoff studies in the detailed engineering analysis of the ACS. 
Table 4-2 illustrates a typical set of performance specifications. 

2. CLASSIFICATION OF ACS METHODS 

For the NASA Task 2.3 study, the attitude control methods are clas- 
sified as active, semi-active, or inactive. These terms are defined by the 
following paragraphs. 
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Table 4-1. ACS Requirements 



III. 


IV. 


Orbital Characteristics 

A. Primary Body 

1 . Sun 

2. Earth 

3. Lunar or planetary 

B. Orbital Parameters 

1. Eccentricity 

2. Semi -major axis 

Orientation Requirements 

A. Primary Pointing 

1. Earth 

2. Sun 

3. Inertial 

4. Lunar or planetary 

B. Secondary Pointing 

1. Sun-oriented solar arrays 

2. Earth-pointing antenna 

C. Required Stabilization 

1. Two axes 

2. Three axes 

D. Stationkeeping 

E. Reorientation 

Accuracy Requirements 

A. Attitude Error 

B. Attitude Error Rate 


Vehicle Characteristics 

A. 

B. Man -rated 


Inertia (I . /I ) 
min max 



Table 4-2. Performance Specifications 


I. 

Weight and Detailed Inertial Characteristics 

II. 

Reliability 

III. 

Life 


IV. 

Interface with Other Subsystems 


A. 

Thermal Control Subsystem 


B. 

Electrical Power Subsystem 


c. 

Communication Subsystem 


D. 

Navigation and Guidance 


E. 

Payload 


F. 

Structure 


G. 

Propulsion 

V. 

Effect of Spacecraft on Configuration 


A. 

Restriction on Choice, Location, or Field of View of Sensors 


B. 

Constraint on Choice or Location of Actuators 


C. 

Environmental Disturbances 


D. 

Elastic Bending Modes 


E. 

Dynamic Behavior 


An active control method uses one or more feedback loops to main- 
tain the vehicle attitude within specified limits. Such a closed-loop system 
is completely self-contained by the spacecraft. It operates by measuring the 
deviation of the vehicle axes from the reference orientation. These measure 
ments are processed by suitable control logic. The output signal from the 
control logic energizes an actuator that torques the spacecraft toward the 
reference orientation. 

An inactive attitude control technique directs the vehicle orientation 
by a passive feedback system. No sensors, no control logic, and no actu- 
ators are required by an inactive attitude control technique. 

The semi-active category covers all schemes that employ some of 
the elements of an active control technique. This may take the form of 
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attitude sensors so that the spacecraft orientation may be estimated by 
ground-based data processing. With such estimates of spacecraft attitude, 
it is desirable in some situations to command intermittent corrections to 
the spacecraft attitude over a ground station. 

Nine distinct types of attitude control are considered in this 

section: 

a. Gravity gradient 

b. Solar stabilization 

c. Aerodynamic stabilization 

d. Magnetic stabilization 

e. Spin stabilization 

f. Dual-spin stabilization 

g. Momentum exchange 

h. Mass explusion 

i. Hybrid. 

Inactive and semi -active configurations are possible for attitude control tech- 
niques a through e. Methods f through h employ active or at least semi- 
active control methods to provide stabilization. The hybrid method is included 
to cover those instances when multiple sources of control torque can be used 
successfully in concert — for example, combined gravity gradient and magnetic 
stabilization. Section 4. A. 3 discusses each method and describes its capa- 
bilities to meet the subsystem requirements. These descriptions provide the 
rationale for establishing the selection matrix, 

3. DESCRIPTION OF ACS METHODS 

a - Gravity Gradient 

A torque results from the interaction of the earth's gravity gradient 
with the distributed mass of a satellite. If the satellite is designed with the 
maximum moment of inertia about the pitch axis and the minimum moment 
of inertia about the yaw axis, the gravity gradient torque aligns the vehicle 
to the earth's local vertical, and orbit rate coupling provides a yaw orienta- 
tion. These control axes are defined in Figure D-l, Appendix D. The torque 
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increases as the sine of twice the angle between a principal axis and the 
loc,al vertical. Thus, two conditions of stable equilibrium result. In the 
desirable condition, the satellite points down toward the earth; in the unde- 
sirable condition, the vehicle is upside down and pointing toward space* 

Transient oscillations in attitude, called librations, persist for 
some time because the natural period is close to the orbital period. Some 
form of energy dissipation in the satellite damps these initial librations and 
reduces the effect of perturbing torque. Energy dissipation is either mechan- 
ical or electrical in nature. In the mechanical systems, the energy loss 
appears in the form of fluid viscosity or a viscoelastic spring material. In 
electrical systems, because of vehicle motion, energy dissipation occurs 
(eddy current losses or hysteresis losses) from the coupling of these electri- 
cal systems to the earth’s magnetic field. 

There are several limitations of the gravity gradient technique: 

(1) The spacecraft can only be oriented to the local vertical. 

(2) The spacecraft must be in a circular or nearly circular orbit. 
The maximum pointing error increases as the ellipticity of 
the orbit for nearly circular orbits. 

(3) The technique is applicable only over a limited range of alti- 
tude from approximately 550 km (300 nmi) to several earth 
radii. Below 550 km (300 nmi), aerodynamic effects pre- 
dominate. At large distances from the earth, solar torques 
prevail. 

(4) The method of deployment must ensure that the vehicle will 
be oriented right side up. 

Semi-active gravity gradient control schemes attempt to overcome 
the problems of gravity gradient stabilization by incorporating control moment 
gyros or reaction wheels into the control system. This results in improved 
damping characteristics and an improved yaw performance of 1 - to 10-deg 
yaw error. The Applications Technology Satellite has been chosen to evalu- 
ate gravity gradient stabilization techniques. 
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b. 


Solar Stabilization 


Solar radiation pressure can be utilized to stabilize a spacecraft 
that has the sun as a primary reference. In the passive scheme, the space- 
craft is designed so that the center of force due to the solar pressure lies 
behind the center of msss . Damping is provided by a passive technique. 

In the semi-active category, the solar action is a vernier control 
to a passively stable vehicle. The Mariner C spacecraft ACS is an example 
this technique. After the spacecraft is in trim for the long coasting phase 
of its mission, the positions of solar vanes are refined by the differential 
heating of their bimetallic support arms. The time constant of this heating 
process is chosen to provide a damping as well as a restoring torque. 

c. Aerodynamic Stabilization 

Satellites in low earth orbit experience significant aerodynamic 
forces. These forces are capable of providing two-axis orientation in pitch 
and yaw. The satellite is stabilized with respect to its orbital velocity vec- 
tor. Weather vane stability and damping are designed into the spacecraft by 
choosing a configuration where the aerodynamic center of pressure is behind 
the center of mass. Aerodynamic forces are significant at altitudes below 
550 km (300 nmi). Only moderate pointing of 1 to 10 deg is possible. The 
semi -active AC techniques use a momentum exchange device to provide roll 
control for low-accuracy, three -axis earth orientation. 

d. Magnetic Stabilization 

For altitudes less than approximately 22,000 km (12, 000 nmi), the 
earth's magnetic field is strong enough to provide useful control torque when 
it interacts with one or more magnets mounted in a spacecraft. In a passive 
scheme, permanent magnets would be used to line up the spacecraft with the 
local direction of the magnetic field vector the same way that the magnetic 
needle in a compass seeks magnetic north. Damping torques would be 
obtained from hysteresis losses and/or eddy current losses. A semi-active 
configuration employs electromagnets so that the direction and strength of 
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the spacecraft magnetic dipole is controlled by currents in the torquing coils 
of the electromagnet. Semi-active magnetic control systems have been used 
on the Tiros II and III weather satellites and on the Navy Transit IA and IB 
navigation satellites . 

e. Spin Stabilization 

Spin stabilization is used primarily at altitudes above 550 km 
(300 nmi) . When a significant amount of spin is imparted along a prescribed 
axis, a satellite becomes, in effect, a gyroscope. A gyroscope is character- 
ized by its angular momentum vector. The behavior of this vector in the 
presence of disturbance torques determines how adequately the gyroscopic 
effect may be used to stablize a spacecraft in inertial space. The angular 
momentum vector provides a kind of stiffening that attenuates the effect of dis- 
turbance torques on the vehicle attitude. Disturbance torques that are trans- 
verse to the spin axis precess the angular momentum vector. A transverse 
torque impulse results in a constant error. A constant disturbing torque 
gives rise to a constant vehicle rate. Disturbance torques along the spin 
direction modify the spin rate. In a completely inactive spin-stabilized ACS, 
the spin angular momentum is chosen such that the cumulative errors result- 
ing from all disturbance torques lie below a specified tolerance. The satel- 
lite has a nutational motion about the total momentum vector when a compo- 
nent of momentum exists about some direction other than the spin axis. Nuta- 
tional motion is removed by a number of passive damping schemes, resulting 
in the dissipation of rotational kinetic energy until the spacecraft finds a state 
of minimum energy. This implies that the spin direction must be along the 
axis of the maximum moment of inertia. The Tiros I weather satellite uti- 
lized inactive spin stabilization for attitude control. 

Semi-active spin-stabilized ACSs employ sun and horizon sensors 
to detect the wanderings of the spin axis. Corrective torques are applied as 
required to keep the spin axis within a specified error limit. One configura- 
tion that has been used to supply reorientation and a stationkeeping capability 
has two mass expulsion thrusters in the ACS. One thruster is parallel to the 
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spin axis, and, when pulsed synchronously with the spin rate, a net torque 
acts to precess the vehicle spin axis. The other thruster is mounted ortho- 
gonal to the spin axis. Its line of action passes through the center of mass. 
This thruster is pulsed synchronously with the spin rate to provide orbital 
velocity control for the vehicle. The Syncom Communications Satellite uses 
this form of semi-active attitude control. 

f. Dual Spin 

Dual-spin stabilization is a useful control technique at altitudes 
above 550 km (300 nmi), and is most commonly employed at synchronous 
altitude. Dual-spin satellites consist of two interconnected rotating bodies. 
The more slowly rotating body (usually earth-oriented) is referred to as the 
despun body; the other as the rotating body. This configuration has the 
interesting property that the maximum inertia constraint for attitude stabil- 
ity does not apply, providing that the despun body contains a nutation damper. 
In the semi-active configuration, sun sensors and earth sensors are mounted 
directly on the rotating body. Their outputs are telemetered to a ground sta- 
tion. The orientation of the vehicle is estimated from these measurements. 
When disturbances drive the attitude error past a prescribed tolerance, a 
ground-initiated control sequence actuates the spacecraft reaction jets. The 
thrust of these jets drives the spacecraft back to its nominal orientation. 

In the active configuration, the control logic is contained onboard 
the spacecraft. The angular momentum of the spacecraft provides short- 
term stability, and the active control system maintains long-term attitude 
accuracy. Pointing accuracies on the order of 0.01 deg are possible. The 
active ACS also uses the control jets for both stationkeeping and reorientation. 

Dual-spin ACSs have proven very useful in communications satellites 
with high pointing accuracies. The Tactical Communications Satellite is an 
example of a spacecraft that has employed this concept. The primary limita- 
tion of the dual-spin configuration is that the surface area on which solar 
cells may be mounted is not fully sun-oriented and is limited in area. Con- 
sequently, there is a limit to the quantity of available power. 
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Momentum Exchange Systems 


The momentum exchange method makes it possible to design a very- 
accurate three- axis active ACS for a spacecraft. Disturbance torques that 
tend to alter the vehicle attitude are counteracted by applying an equal but 
opposite torque to the spacecraft. The reaction torque on the momentum ex- 
change device increases or decreases its momentum. All momentum ex- 
change devices are capable of storing only a finite amount of momentum. 

When this condition is reached, they are saturated. The ACS must provide 
an independent source of control torque so that the saturated momentum can 
be dumped. 

Accuracies of one-second-of-arc attitude uncertainty of the primary 
sensor are possible with this method. The momentum exchange devices can 
be used for attitude maneuvers. If a reaction jet system is present for 
momentum dumping, it can be used for stationkeeping. An ACS design based 
on the momentum exchange method is used on both the Orbiting Astronomical 
Observatory and the Nimbus weather satellite. 

h. Mass Expulsion 

In practice, mass expulsion devices take the form of cold gas, mono 
propellant, or bipropellant thrusters. Thrusters or reaction jets produce 
forces on the spacecraft. When the line of action does not pass through the 
center of mass, then a torque is produced. Two opposed thrusters mounted 
on opposite sides of the spacecraft produce control torques with no net force 
applied to the vehicle. These torques are used to control the vehicle attitude. 

The use of thrusters results in a control system that has a limit 
cycle. The limit-cycle operation results in the continual depletion of fuel. 

The fuel consumption due to limit cycling depends on the ratio of angular 
rate to limit-cycle displacement. The limit-cycle amplitude and rate are 
determined by the ACS requirements. Hence, the propellant required 
depends on the mission duration. 

Reaction jets have a number of distinct advantages. They can be 
used in several modes of spacecraft operation, for example: acquisition. 
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maneuvering, stationkeeping, and reorientation. They can be operated all 
the way from minimum impulse size during unperturbed limit cycling to 
100% duty cycle to counteract large transients. The primary disadvantages 
of the mass expulsion control technique are the limited quantity of propel- 
lant onboard the spacecraft and the maximum reliable number of valve 
firings . 

4. EXAMPLE OF SEARCH/SORT /FILTER TECHNIQUE 

The search/sort/filter matrix shown in Table 4-3 summarizes 
the characteristics of each attitude control technique as a function of whether 
it is active, semi -active, or inactive as defined in Section 4. A. 2. The 
requirements discussed in Section 4. A. 1 are listed horizontally across the 
top of the page. These requirements are categorized as orbital character- 
istics, orientation requirements, accuracy requirements, and vehicle 
characteristics. Each category is subdivided into as much detail as neces- 
sary to define the ACS requirements. The category of secondary pointing 
refers to the ability to independently point a device or sensor mounted on a 
spacecraft that is stabilized by the primary method. The attitude control 
methods are listed on the left-hand side of the table in generally increasing 
order of sophistication from top to bottom. 

If the search/sort/filter is to be utilized, a set of ACS require- 
ments is necessary. Then, the process commences with the gravity gradi- 
ent method of attitude control. The horizontal line corresponding to the 
gravity gradient inactive method is followed across the page. A search is 
made through all requirements to determine whether this method is suitable 
for the mission under consideration. The process continues to sort through 
all the control methods and terminates when the last technique in the first 
column has been investigated. In the cases where several attitude control 
techniques satisfy the ACS requirements, a tradeoff study is used to deter- 
mine the method best suited for the particular application. The performance 
specifications listed in Table 4-2 provide meaningful criteria for such trade 
studies. The following example illustrates the search/sort /filter technique. 
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Example: Determine an appropriate attitude control technique 
for an unmanned communications satellite. The satellite oper- 
ates in a nearly circular synchronous earth orbit. Proper 
operation of the communications payload requires three-axis 
stabilization and a stationkeeping capability. The attitude 
error tolerance is 0. 1 deg, and the attitude error rate toler- 
ance is 0.005 deg/sec. 

The gravity gradient, solar, and spin stabilization techniques cannot meet 
the accuracy requirement. Aerodynamic and magnetic stabilization are 
eliminated by the orbital characteristics. The dual-spin and mass expul- 
sion techniques cannot meet the attitude error rate requirement. The momen- 
tum exchange technique is the appropriate method in this instance. The 
requirement for stationkeeping implies that reaction jets are included in 
the ACS and thus, the attitude control becomes, in effect, a hybrid method. 

B. FUNCTIONAL BLOCK DIAGRAMS 

The aggregate equations are a function of the particular ACS mecha- 
nization utilized. Thus, as a starting point in the modeling activity, the 
functional requirements must be translated into a functional block diagram, 
so that the ACS mechanization may be determined. For example, if a space 
vehicle is to have both a powered-flight and an on-orbit control capability, 
then a functional block diagram such as that depicted in Figure 4-2 should 
be drawn. The functional block diagram shows 30 elements consisting of 
sensors, amplifiers, shaping, compensation, thrusters, and engines. After 
the functional block diagrams are drawn, one must consider the issues of 
centralization and redundancy. As an example of centralization, the function 
of sensing the pitch motion of the vehicle during the on-orbit and powered-flight 
periods might be accomplished by the same sensor. After these steps are 
completed, more specific block diagrams may be drawn, from which aggre- 
gate equations can be derived. 
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Figure 4-2, Attitude Control Functions 




Four types of vehicles were considered for this study: 

Class Type of Vehicle 

1 Unmanned, expendable, autonomous 

2 Unmanned, reusable, autonomous 

3 Manned, reusable, autonomous 

4 Manned, reusable, using ground support 

Table 4-4 summarizes the functional requirements of the roll, pitch, 
and yaw loops for these vehicles. 

For the vehicles in Table 4-4, the ACS performs three basic 
functions: 

1. Rate stabilization 

2. Attitude control 

3. Guidance control during powered flight. 

Sections 4. B. 1 through 4.B.3 discuss each of these topics in their turn. 
Coasting flight and powered flight above the earth's atmosphere are con- 
sidered in this flight control study. Coasting flight implies the control of 
the spacecraft attitude while the spacecraft is orbiting a primary body such 
as the earth or sun. During powered flight, the attitude and the flight path 
of the vehicle must be controlled while thrusting. These two categories 
place different requirements on the ACS. The sources of reference infor- 
mation may not be the same, and the sources of control torques that change 
the vehicle attitude may be different. The overlap between these two cate- 
gories of flight lies in the fact that they are both part of the same overall 
control system, using common equipment whenever possible. 

Figure 4-3 displays the generalized functional block diagram of an 
active ACS. Specific examples of a dual-spin and a three-axis mass expul- 
sion control system functional block diagram for coasting flight appear in 
Figures 4-4 and 4-5. The scope of the ACS includes all the functional blocks 
in Figures 4-3, 4-4, and 4-5, except the blocks labeled "vehicle dynamics." 
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Table 4-4. Functional Requirements of Three-Axis Mass Expulsion ACS 
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Figure 4-3. Generalized ACS Functional Block Diagram 
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Figure 4-4. ACS Functional Block Diagram, Dual-Spin Configuration 
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Figure 4-5. ACS Functional Block Diagram, Three-Axis Mass 
Expulsion Gyrocompassing Scheme 






In Figure 4-3, the progression of the feedback loops from inner to outer 
reflects the lower requirement on the dynamic response of each successive 
feedback path. 

Generalized functional block diagrams do not show several impor- 
tant features that must be considered in the design of an ACS: 

1. Coupling of the control loops due to kinematic and inertial 
cross coupling 

2. Switching functions, for example when the spacecraft trans- 
fers from the coasting-flight mode to the powered -flight 
mode 

3. Power sources that energize the control system 

4. Adaptive nature of nonlinear control loops commonly 
employed in an ACS 

5. Redundancy that achieves a reliability commensurate with 
the mission requirements. 

The more detailed functional diagrams of specific systems are required for 
this purpose and are used to develop aggregate equations. 

1. RATE STABILIZATION 

Rate stabilization can be mechanized by a number of techniques. 
The simplest manner to obtain rate information is to measure the angular 
velocity of the vehicle with rate gyroscopes. A rate gyro measures angu- 
lar velocities with respect to inertial space. In many applications, it is 
desirable to stabilize the vehicle relative to a rotating coordinate system 
(e.g., earth reference). Under these circumstances, compensating signals 
must be provided that correct for the angular velocity of the noninertial 
coordinate frame. Several synthetic rate schemes have been developed that 
do not rely on rate gyros; these can vary from passive networks that dif- 
ferentiate the output of an attitude sensor to control systems that utilize 
nonlinear components to derive rate information. 
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FREE-FLIGHT ATTITUDE CONTROL 


Attitude control of a space vehicle requires the ACS to perform 
four separate functions: 

a. Identify a desired reference orientation. 

b. Sense angular deviation between the reference orientation 
and a set of axes fixed in the vehicle. 

c. Provide control torques. 

d. Couple the sensor instrumentation to the control torque. 

The details of each function are strongly dependent on the mission 
duration, required pointing accuracy, orbital geometry, and payload 
requirements. 

Figures 4-4 and 4-5 show two configuration-oriented functional 
block diagrams. Figure 4-4 illustrates the dual-spin configuration, a sta- 
bilization method suitable for unmanned reusable or expendable vehicles with 
or without ground support. Figure 4-5 displays the functional block diagram 
of a three-axis mass expulsion ACS that uses a gyrocompassing scheme. A 
gyrocompassing configuration ACS is applicable to a space vehicle such as 
the Space Tug. This ACS method is acceptable also for manned or unmanned, 
expendable or reusable vehicles at any level of autonomy. 

The following paragraphs provide some insight into the problems 
associated with the mechanization of each function. 

For a space vehicle to execute its mission successfully, it must 
achieve a particular reference orientation. The reference orientation is 
determined by the mission objective. The mission establishes general ori- 
entation requirements, whether toward the sun, earth, or some other celes- 
tial body. Pointing requirements on solar panels and transmitting antenna 
also influence the reference orientation. In general, the reference orienta- 
tion may be either rotating or fixed in inertial space. If orbit changes are 
required, several reference orientations may be required during the course 
of the mission. 
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Actuators in an ACS are torque -producing devices. The control 
torques produced by the actuator change the attitude of the vehicle in a pre- 
scribed manner so that the vehicle follows the reference orientation or atti- 
tude command. Two general methods are available for producing control 
moments: mass expulsion systems and momentum exchange systems. 

On-off thrusters are the commonly employed actuators of the first 
category. They may be clustered to increase the net control torque applied 
to the vehicle and to increase the reliability of the ACS. Thrusters are of 
three types: 

a. Cold gas, such as nitrogen 

b. Monopropellant, such as hydrazine 

c. Bipropellant. 

The cold gas thrusters have a limited specific impulse of 785 N-sec/ 
kg (80 lb-sec/lb^) or less. Their tankage -to-gas -weight ratio is high. 
Hydrazine thrusters have a higher specific impulse of 1230 N-sec/kg (125 lb- 
sec/ibm), and a favorable tankage -to -propellant ratio. Bipropellants have a 
high specific impulse of 2460 N-sec/kg (250 lb-sec/lb m ) or more. The selec- 
tion of a particular propellant-thruster combination involves consideration of 
the thermal environment, mission duration, total required angular impulse, 
minimum impulse size, volume, and weight. 

Inertia wheels and control moment gyros are two examples of 
momentum exchange devices. These actuators have the advantage that they 
need not give rise to a forced limit-cycle operation of the ACS. They use 
electrical energy, which may be replaced in space by a spacecraft carrying 
solar panels. They have the mutual disadvantage of saturation, which occurs 
in an inertia wheel when the wheel spins at its maximum speed relative to 
the spacecraft. An analogous situation arises in a control. moment gyro that 
has been precessed through 90 deg. For either type of momentum exchange 
device, the ACS must make provisions to unload the momentum saturation 
condition by an additional independent torque -producing actuator such as an 
on-off thruster. 
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The choice between a mass expulsion or combined momentum 
exchange and mass expulsion torque-generating system is accomplished 
by a tradeoff study that considers the required pointing accuracy, perform- 
ance, weight, reliability, and cost associated with each method. 

The controller function is to control the spacecraft attitude. The 
controller performs this function by processing the signal from the attitude 
sensor to obtain a closed-loop input for the torque actuator. The torque pro- 
duced by this input slaves the vehicle body axes to the reference orientation. 
This reduces the attitude sensor measurement to zero ideally. The con- 
troller is designed so that the ACS maintains the angular error between the 
reference and body axes below the required pointing accuracy in the presence 
of external and internal disturbance torques and vehicle acceleration with 
respect to the reference orientation. To accomplish its function throughout 
all phases of the mission, the controller operates in a variety of distinct 
modes: 

a - Search Mode; The search mode represents the first oper- 
ation of an ACS after the satellite has separated from the 
launch vehicle. The strategy in this mode is to cause the 
spacecraft to rotate until its attitude sensors determine the 
location of one or more celestial bodies. 

b* Acquisition Mode : This mode is entered once the primary 
celestial body is within the field of view of the spacecraft 
sensors. If more than one celestial body is employed, the 
ACS may need a search and an acquisition mode for each 
reference body. 

c * Coasting -Flight Mode : After the vehicle has acquired its 

desired orientation, it operates in the coasting -flight mode. 

If the payload does not require high pointing accuracy all 
the time, then suitable parameters in the ACS can be manip- 
ulated to provide both fine and coarse pointing control. In 
this manner, the consumption of expendables and power is 
minimized. 

d. Reorientation Mode : This mode is required before a mid- 
course correction can be accomplished. It is also neces- 
when the A.CS svdtches from one set of reference axes 
to another, for example, from local-vertical to inertial. 
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e. Powered -Flight Mode : Powered flight is required for 
midcourse corrections, orbital changes, or stationkeeping. 

f. Reacquisition Mode : This mode is entered when the space- 
craft switches from one reference orientation to another. 

g. Backup Mode : The backup mode is necessary to achieve a 

reliable mission operation in the event that a failure occurs 
in the primary ACS. 

The configuration of the signal processing for each mode is deter- 
mined by a detailed design process. The signal processing for each mode 
is the result of a tradeoff study that analyzes and simulates the appropriate 
configurations of the controller, sensors, actuators, vehicle dynamics, 
environmental disturbances, and initial conditions. 

Either digital, analog, or hybrid electronics can execute the signal 
processing of the controller. Analog loops are convenient for simple control 
systems. They efficiently implement wide bandwidth loops . Variable loop 
gains, time constants, and complex compensating functions are implemented 
with ease with digital equipment. Switching modes, for example, from coast- 
ing to powered flight or from checkout to operational, can be accomplished by 
accessing a program stored in the computer memory. Mode switching in an 
analog system requires a physical change in connections. Thus, the choice 
of analog or digital control affects the reliability. The cost of a digital ACS 
depends on whether ground-based or onboard computing is used. In either 
event, the computer sampling rate and quantization level must be carefully 
cho sen, 

3. POWERED -FLIGHT ATTITUDE CONTROL 

The powered -flight mode of the spacecraft orientation is used to 
change the orbit parameters. The ACS operates during powered flight to 
stabilize the vehicle to the proper attitude to achieve the desired velocity 
change. A gimbaled engine is commonly used to provide the required pro- 
pulsion. Control moments about the pitch and yaw vehicle axes result when 
the pitch and yaw hydraulic actuators deflect the engine thrust. Control 
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torque about the roll axis is provided by roll thrusters whose thrust level 
may be greater than the level required for coasting flight. The large forces 
and torques applied to the spacecraft by the gimbaled engine give rise to a 
number of control problems that are not predominant during coasting flight. 
In addition to controlling the rigid body vehicle mode, the ACS must also be 
designed so that it does not drive lightly damped oscillatory modes unstable. 
Lightly damped vehicle modes arise from elastic vibration of the structure 
and from sloshing of the propellant in the storage tanks. These modes are 
excited by the torque reaction due to moving the gimbaled engine. 

During powered flight, the ACS may also be coupled with the guid- 
ance loop. The vehicle acceleration during powered flight is sensed by iner- 
tial grade accelerometers. A computer resolves the measured acceleration 
in the desired reference frame. A navigation computer determines the vehi- 
cle's velocity by integrating the measured acceleration. The guidance com- 
puter uses the target data information and the integrated acceleration to gen- 
erate steering commands for the attitude control loop. The attitude of the 
vehicle is commanded by the guidance loop in pitch and yaw at a rate propor- 
tional to the angular deflection about two axes of the required velocity change 
and the velocity to be gained. When the velocity to be gained is below a pre- 
scribed threshold, the guidance computer generates a shutdown command to 
the engine. Then, the ACS switches from the powered -flight operational 
mode to the coasting -flight mode. 

C. PERFORMANCE AGGREGATE EQUATIONS 

1. INTRODUCTION 

The four variables that define a subsystem are the performance, 
safety, cost, and schedule parameters. These general parameters were 
each subdivided into specific parameters as shown in Table 1-1. Under the 
heading of "technical characteristics," this study considers as an example 
the on-orbit pointing accuracy of a three-axis, earth-pointing, mass expul- 
sion ACS. The pointing accuracy aggregate equations presented in Sec- 
tion 4.C.2 relate the pointing accuracy to the error characteristics of the 
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ACS components. The fuel consumption of the ACS must also be considered, 
since it is a major contributor to the weight and volume of the ACS. The fuel 
consumption aggregate equations are presented in Section 4.C.3. The remain- 
ing performance parameters listed in Table 1-1 are power, weight, volume, 
vibration specification, temperature specification, and pressure specifica- 
tion. Sections 4. C. 4 through 4.C.9 present the aggregate equations devel- 
oped thus far for these parameters. 

The prime objective of this section is to develop a set of perform- 
ance aggregate equations for an ACS. It was necessary to computerize some 
of these equations to facilitate their use in a trade study. The particular 
aggregate equations used in the sample computer simulation are described in 
Section 5. 

2. ON-ORBIT ACCURACY AGGREGATE EQUATIONS 

The aggregate equations presented in this section are for a Tug -type 
vehicle with a three-axis mass expulsion ACS, using horizon scanners for 
pitch and roll reference and gyrocompassing for yaw reference. The par- 
ticular mechanization of this type of ACS that is treated in this section is that 
used on an Agena-type vehicle (Ref. 1). The vehicle attitude is sensed by a 
three -axis body-mounted inertial reference unit containing rate integrating 
gyros that are referenced to local vertical/orbit plane (LV/OP) coordinates 
by horizon scanners and gyrocompassing. The control axes are defined in 
Figure D-l, Appendix D. The vehicle is maintained in a fixed attitude with 
respect to the LV/OP with a pitch program, where the orbital pitchover 
rate is achieved by programming the appropriate signal into the pitch gyro. 
The horizon scanners bound the effect of gyro drift, thereby keeping the 
vertical axis of the vehicle aligned with the center of the earth. The block 
diagrams for the attitude reference unit mechanization are shown in 
Figure 4-6. 

The equation for attitude error on a control axis consists of two 
parts, the attitude reference error and the control system deadband. 

The equations for pitch, yaw, and roll attitude reference error for a near- 
circular orbit are derived in Section 1 of Appendix D. The attitude error due 
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to the control deadband consists of two parts: the nominal deadband setting 
and the error in the nominal deadband setting. This can be expressed as 


e DB " 0 DBN + (0 DB^ 


(4-1) 


where 

0DBN ~ nom ^ na ^ control deadband 
“ deadband tolerance 

U o € 

The form of the expression for total attitude error is the sum of the nominal 
deadband setting and the RSS value of all the other terms representing vari- 
ation about the nominal deadband. 


E q - 6 DBN + £( Attitude refe 


1/2 


rence error 


> + < 0 DB*« J < 4 ‘ 2 > 


Thus, the on-orbit accuracy aggregate equations for pitch, roll, and yaw are 


Pitch: E e = e DBN + jp 9N + (e N H e /H Fe ) 2 + ( e H h 0 /h F9 ) 2 


Roll: 


+ [<“0p -“o )/H F«] i + ( 6 »>‘ : + ( e - D ) 2, 


2 2 ) * ^ 
A ' + * 0 DB*« ( 


% " * 


DBN + [ P pN + G l ) + G l ) 

2 2 V 

+ ( 0 A > + ( W € J 


(4-3) 


(4-4) 


Yaw: 


E + ~ ^DBN + [ (0 YG w 0 G 3 ) + G 3 ) + ^ 0 RG ^0^02^ 


+ («A D /^02 )2 + ( *N G 2 )2 + ^ + <W?f 2 ( 4 ' 5) 
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where 


G 1 +£J oi^ 

G 2 = t H + H F0 * H 0 (H F^ + “Oi^OZ (H F4 J + w 01 ) 

°3 = H F0 // “O2 * H F4j + w 01^ 

The sensitivity terms are 

Hg = pitch horizon scanner gain 

= roll horizon scanner gain to roll axis 
= roll horizon scanner gain to yaw axis 
Hpg = pitch feedback gain 
**F 0 = ro ^ feedback gain 
(Hp^ + = roll-to-yaw coupling gain 

<Jq 2 = yaw-to-roll coupling gain 
u)q = true orbital pitchover rate. 

The error terms are 
Pitch axis 

Pqvi = filtered pitch horizon scanner noise power 
[defined in Eq. (4-6)] 

= pitch horizon scanner null error 
= pitch horizon anomalies 
( w 0 p ~ <*Jq) = programmed pitchover rate error 
= vehicle alignment in pitch 
©DBN = deadband setting 

(©Db^ = P itch deadband tolerance 


4-33 



Roll axis 


P M = filtered roll horizon scanner noise power 
^ [defined in Eq. (4-7)] 

0^ = roll horizon scanner null error 

= roll horizon anomalies 

<f>j^ = vehicle alignment in roll 

^DBN = deadband setting 

(^DB^ = roll deadband tolerance 


Yaw axis 

9 yg = pitch misalignment of yaw gyro 
j-j - G-insensitive drift of yaw gyro 
®RG = pitch misalignment of roll gyro 
= G-insensitive drift of roll gyro 
0^ = roll horizon scanner null error 
4^ = vehicle alignment in yaw 
*^DBN = y aw deadband setting 
(^DB^e = yaw deadband tolerance 

The expressions for the filtered pitch and roll horizon scanner noise power 
are 


0N 


f: 


•« V“> V 


do> 


° w + H F0 2 


= r V“i E“ 2 h ^“o 2 h ^ 

0 “ 4 + " 2 K* - 2 i ys) + H l /c 


9>N 


dto 


(4-6) 


(4-7) 


where and are the pitch and roll horizon scanner output noise power 
spectra. 
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3. 


PROPELLANT CONSUMPTION AGGREGATE EQUATIONS 


Propellant consumption can be broadly classified into two 
categories: 

a. Propellant consumption proportional to the spacecraft 
activity (such as number of maneuvers) 

b. Propellant consumption proportional to the spacecraft 
life. 

The total propellant consumption is the sum of categories a and b. 
In principle, one might want to subtract from category b the time the space- 
craft is particularly active (such as maneuvering time). However, since 
such activity times are usually small, compared to the total spacecraft life- 
time, the propellant consumption for category b is usually computed by 
neglecting the time spent during maneuvers. The total propellant consump- 
tion is conservatively given by 


W„ = W 


R 


E 

N 


W 


M 


W LC + W D 


+ W 


V 


(4-8) 


where 


= rate recovery propellant consumption 
= single -maneuver propellant consumption 
N = number of maneuvers 

= limit-cycle propellant consumption 
W D = disturbance -torque propellant consumption 
Wy = powered-flight AV propellant consumption. 

Sections 4. C. 3. a through 4. C. 3. c present the aggregate equations 
for ACS propellant consumption due to rate recovery and maneuvers, limit- 
cycle operation, and disturbance torques, including the torques during pow- 
ered flight. Section 4. C. 3.d gives the aggregate equation for propellant 
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consumption for the AV during powered flight. Also included for convenience 
are tables of replacement characteristics for various engines and thrusters. 
The derivations of the aggregate equations are given in Section 2 of 
Appendix D. 

a. Rate Recovery Propellant Consumption 

At various times during the spacecraft life, the control system must 
stabilize the spacecraft from moderately high initial rates. Moderately high 
means that the spacecraft control system tends to operate linearly because the 
effects of a deadzone are negligible. For this type of vehicle, the aggregate 
equation for rate recovery propellant consumption is 

W R = £ h C il«oil 'h ‘sp <*-’> 

where 

I. = vehicle inertia about ith control axis 

A = thruster moment arm for ith control axis 

I = specific impulse 
, P 

= initial rate about ith control axis 

and 


G. = (1 + Ze~V 2 + e " n i)/(l + e _T1 i) 
, 2 1/2 

^i = 2Tr /(* " ) for £. < 1 

t), = 0 for 2 1 

i 


(4-10) 


(4-11) 


where t,. is the control system damping for the ith control axis as defined in 
Section 2 of Appendix D. 
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The propellant consumption for additional maneuvers that may be 
performed by the spacecraft during its lifetime must be added to that 
given by Eq. (4-9). The consumption for each additional maneuver may be 
obtained by 


W M - £ 2I i G il« 
1 = 1 


Mil^i *sp 


(4-12) 


where 0^.^ is the maneuver rate about the ith control axis, and the factor of 
two accounts for rate increments at the start and end of a maneuver. 

b. Limit-Cycle Propellant Consumption 

The aggregate equation for limit-cycle propellant consumption in 
the absence of external torques is given in Eq. (4-13). The consumption with 
external torques may be computed conservatively by adding the limit-cycle 
propellant consumption to that given in Section 4.C.3.C for disturbance- 
torque propellant consumption. 


W 


LC 


3 

= z 

i = l 


I.(A0.) 

1 1 


V 6 


i d: 

sp 1 


(4-13) 


D! = D. - 26 
1 1 



(4-14) 


where 

I. = vehicle inertia about ith control axis 

- thruster momentum arm for ith control axis 
I = specific impulse 

A8 i ~ rate increment from one thruster pulse on ith control axis 
D! = effective deadband width for ith control axis 
Dj = deadband setting for ith control axis 
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0 . = peak attitude reference noise for ith control axis 

npi r 

= vehicle lifetime. 

c. Disturbance-Torque Propellant Consumption 

The aggregate equation for worst case disturbance-torque propel- 
lant consumption is 


W 


D 


3 

- E 

i = l 


V < T Gi 


+ T. . + T 
Ai 


Mi 


T Si> + 


(t _/i. I ) 
P 1 sp' 


T Pi ) 


( 4 - 15 ) 


where 

= thruster moment arm for ith control axis 
I = specific impulse 
t^ = vehicle lifetime 
tp = time of powered flight 
T Qi = gravity gradient torque about ith control axis 
T^ = aerodynamic torque about ith control axis 
T^j. = magnetic torque about ith control axis 
Tg. = solar torque about ith control axis 

Tpi = torque during powered flight about ith control axis. 

Equation (4-15) gives worst case propellant consumption because the time 
variability of the torque terms has not been considered. This variability can- 
not be considered unless the particular spacecraft configuration, spacecraft 
attitude, and orbital parameters are defined. Expressions for the disturbance 
torques are given in Section 2 of Appendix D. 

d. Powered -Flight AV 

The aggregate equation for powered-flight AV propellant consump- 
tion is 


W y = W E [exp(AV/I gp ) -1] 


( 4 - 16 ) 



where 


Wg = weight of vehicle without fuel 

AV = velocity change 

I = specific impulse* (N-sec/kg) 
sp 

Expressions for AV for a typical mission profile are given in Section 2 of 
Appendix D. 

Because of current NASA interest in the Tug, which has a powered- 
flight capability, vehicles similar to the baseline Tug vehicle were examined. 
There are three vehicles with flight capability very similar to the baseline • 
Tug vehicle: Agena, Transtage, and Centaur. Their characteristics are 
shown in Table 4-5. Possible main engine candidates are shown in Tables 4-6 
and 4-7; possible ACS engine candidates are shown in Table 4-8. 

4. POWER AGGREGATE EQUATIONS 

These equations determine the amount of power that must be sup- 
plied to the ACS by the power conditioning subsystem. Both average and 
peak power must be considered. Average power is computed by summing 
the average power used by each component that satisfies the pointing accu- 
racy requirements. Peak power requirements are a function of time, and 
may be computed by adding the power -versus -time functions for all compo- 
nents. In addition, resistive losses, which are a function of the cabling 
characteristics, must be considered. The power aggregate equations are 

Average Power = (1 + 6) V! Component Average Power 
Peak Power (t) = (1 + 6) Component Peak Power (t) 

where 

6 = f (cabling characteristics) 


If I S p in lb-sec/lb m is used, it must be multiplied by g (acceleration due 
to gravity) before substitution into Eq. (4-15). 
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Table 4-5. Upper Stage Characteristics 



Vehicle Designation 
(Manufacturer , Model) 


Agena 

Transtage 

Centaur 

Main. Engine Characteristics 

(Bell, 8096) 

(Aerojet, 10-138) 

(P&W, RLIOA-3) 

Thrust F, N (lb) 

71, 168 (16, 000) 

36, 251 (8150) 

66,720 (15,000) 

Burn time sec 

240 

500 

470 

Mode of Cooling 

Regenerative 

oxidizer 

Ablation 

Regenerative 

fuel 

Fuel 

UDMH a 

50/50^ 


Oxidizer 

IR FNA C 

N 2°4 

lo 2 

Mixture Ratio, O/F^ 

2. 58 

2, 0 

5. 0 

Chamber Pressure P c , N/m 2 (psia) 

3. 49 X 10 6 (506) 

0. 745 X 10 6 (108) 

2. 07 X 10 6 (300) 

Chamber Temperature T c , °C 

2727 

2804 

2924 

Exhaust Temperature, "C 

802 

1097 

836 

Specific Impulse I, N-sec/kg (sec) 

2940 (298) 

2980 (303) 

4200 (426) 

Nozzle Expansion Ratio e 

45 

40 

40 

Overall Length L, m (in. > 

2. 1 (83) 

2. 06 ( Si ) 

1. 71 (67. 5) 

Maximum Diameter D, m (in. ) 

0.83 (32.5) 

1. 21 (47. 4) 

0. 98 (38. 7) 

Total Dry Weight W, kg (lb) 

134 (296) 

96 (211) 

134 (296) 

Ignition Mode 

Hypergolic 

Hypergolic 

Spark 

Propellant Feed 

Turbopump 

He pressure 

Turbopump 

Restart Capability 

Dual 1 

1 

Multiple 

3, with throttling 100:1 

Power Requirement, continuous W 

1 13 1 

NA e 

NA e 

Engine Life, sec 

1 

1330 i 

500 

2820 

Storage Life, yr 

2 ! 

NA e 

3 

Thrust Vector Control 

±5° hydraulic 
gimbal 

None 

±4* gimbal 


a UDMH = unsymmetrical dimethylhydrazine 
b 50/50 - 50% UDMH, 50% N 2 H 4 

"IRFNA = inhibited red fuming nitric acid, 2% H^O, 84.6% HNO^, 13.4% N^C^, 0. 7% HF inhibitor 
^O/F = weight of oxidizer /weight of fuel 
e NA = not available 
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Table 4-5. Upper Stage Characteristics (Continued) 



Vehicle Designation 
(Manufacturer) 

Attitude Control Propulsion 
Characteristics 

Agena 

(NA) a 

Transtage 
(Rocket Research 
Corp. ) 

Centaur 

(Bell) 

Propellant 

N 2 /Fr-14 (cold gas) 

N 2 H 4 

H 2°2 

Type of Pressurization 

Pressure regulated 

Ng pressure 
blowdown 

N£ pressure 
regulated 

F (multi levels), N (lb) 

44. S/2.2 (JO/0. 5) 

111 (25) 

13. 3/222 (3/50) 

2 

Storage Pressure, N/m (psia) 

2.48X 10 7 (3600) 

2.21 X 10 ? (3200) 


P c , N/m 2 (psia) 

6. 9 X 1 0 5 /3. 4 X 10 4 
(100/5) 

2. 06 X 10 6 to 6. 9 X 10 5 
(300 to 100) 

1. 31 X 10 6 
(190) 

T c , *C 

21 

899 

699 

I, N-sec/kg (sec) 

67 0 (68) 

2260 (230) 

1530 ( 155) 

€ 

45 

50 

15 

L,, m (in. ) 

Integral cluster 
of 3 

0. f 3 (5. 2) 

17. 0 (6. 7} 

D, m { in. ) 

NA a 

0. 064 (2.5) 

0. 04/0. 046 
(1.6/1. 8) 

W, kg (lb) 

NA a 

0.54 (1. 2) 

0.68/1.36 
: (1. 5/3.0) 

Ignition 

DNA b 

Catalyst 

Catalyst 

Restarts 

DNA b 

Multiple 

900 

Minimum Impulse Bit, N-sec 
(lb-sec) 

0. 044 (0. 01) 

0.556 (0. 125) 

1. 34 (0. 3) 

Power, continuous W 

NA a 

NA a 

24 


a NA = not available 
^DNA = does not apply 
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Table 4-6. Possible Candidates 


HHI 

Manufacturer, Model 



Transtage 

Centaur 

Main 

Aerojet 10-137 

Aerojet 10-104 

Aerojet 10-137 



Aerojet 10-118 

Rocketdyne G-l 



Rocketdyne G-l 

TRW LEMDE 



TRW LEMDE 


ACS 

Cold gas 

Marquardt Advent 

RRC 



Bell 8441 

TRW 



Aerojet 

Hughes 

(electrolysis) 



Rocketdyne 

Rocketdyne 
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Table 4-7. Main Engine Replacement Characteristics 



Manufacturer 

(Model) 

Main Engine 
Cha racte ri stic s 

Aerojet 

(10-118) 

Aerojet 
(1 0-104) 

Aerojet 

(10-137) 

TRW 

(LEMDE) 

Rocketdyne 

(G-l) 

F, N (lb) 

33,964 

(7575) 

35, 095 
(7890) 

95, 632 
(21,500) 

46, 704 
(10, 500) 

53, 376 
(12, 000) 

t b , sec 

170 

290 

750 

1030 

338 

Mode of Cooling 

Regenerative 

oxidizer 

Regenerative 

oxidizer 

Ablation and 
Radiation 

Ablation and 
Radiation 

Regenerative 

fuel 

Fuel 

UDMH a 

UDMH a 

50/50 fa 

50/50 b 

N 2 H 4 

Oxidizer 

0/F d 

IRFNA C 
2. 8 

IRFNA C 
2. 8 

N 2°4 
2. 0 

N 2°4 

1.6 

LF 2 
1. 6 

P c , N/m^ (psia) 

1.42 y io 6 
(206) 

i.42 y 10 6 
(206) 

0. 69 X 10 6 
(100) 

0. 758 X 10 6 
<UD) 

1. 03 X 10 b 
(150) 

T,, ’€ 
c 

2727 

2727 

2808 

2808 

3871 

I > N-sec/kg (sec) 

2630 

(267) 

2740 

(278) 

3140 

(319) 

3000 

(305) 

3270 

(332) 

€ 

20 

40 

62. 5 

47. 5 

20 

L, m (in. ) 

4. 85 
(191) 

1. 8 
(71) 

3. 35 
(132) 

216 

(85) 

1. 6 
(63) 

D » m ( in - ) 

0. 81 
(32) 

0. 84 
(33) 

2. 5 
(98) 

1.5 

(59) 

0. 91 
(36) 

W, kg (lb) 

61 

<J35) e 

452 . 

( 997 ) 

352 , 
(777) 

159 £ 
(350j 

401 

(885)* 

Propellant Feed 

He pressure 
regulated 

He pressure 
regulated 

He pressure 
regulated 

He pressure 
regulated 

He pressure 
regulated 

Ignition 

Hypergolic 

Hypergolic 

Hypergolic 

Hypergolic 

Hypergolic 

Restarts 

None 

None 

50 

20 

2 

Thrust Vector Control 

Hydraulic 

gimbal 

Hydraulic 

gimbal 

Hyd raulic 
gimb a 1 

Gimbal 

10:1 

throttling 

Electromechanical 

gimbal 

ACS 

Ullage gas 

N 2 gas 

None 

None 

None 

Storage Life, yr 

2. 5 


3 

5 


Development Status 

j. 

Delta 

launch 

vehicle 

Ablestar 

Apollo 

service 

module 

LEM 

descent 

Nomad 

experimental 


a UDMH - unsymmotrical dimethylhydrazinc 
b 50/50 ^ 50% IIDMH, 50% N,IJ 4 

C IRFNA inhibited po<I fuming nitric acid, 2% I^O, 84, 6% HNQ 3> 13.4% N 2 0 4> 0. 7% HF inhibitor 
d O/F' - weight of oxidi z« r /weight of fuel 
Chamber and injector 
^Overall online 
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Table 4-8. Attitude Control Thruster Characteristics 


Attitude Control 
Thruster 
Characteristics 




Manufacturer 




Marquardt 

RRC 

Bell 

TRW 

Aerojet 

Hughes 

Rocketdyne 

Rocketdyne 

F, N (lb) 

ill 

8. 9 

111 

13. 3 

111 

6. 7 

111 

111 


(25) 

(2) 

(25) 

(3) 

(25) 

(1.5) 

(25) 

(25) 

v sec 

5400 

Un limit ed 

3000 

4000 

5700 

30 

140 

360 

Mode of Cooling 

Radiation 

Radiation 

Radiation 

Radiation 

Radiation 

Radiation and 
heat sink 

Ablation 

Ablation 

F uel 

25% N 2 H 4 

N 2 H 4 

MMH a 

N 2 H 4 

50/5 0 b 

h 2 o 

electrolysis 

50/50 b 

50/50 b 

Oxidizer 

n 2 o 4 

DNA C 

N 2°4 

DNA C 

N 2°4 

DNA C 

N 2°4 

N 2 °4 

0/F d 

1.47 

Mono 

1.6 

Mono 

1. 55 

8 

1. 56 

1. 56 

P c » X/m^ (psia) 

1. 28 X 10 6 
(185) 

1. 03 X 10 6 
(150) 

0. 552 X 10 6 
(80) 

1. 28 X 10 6 >to 
0. 793 X 10 
(185 to 115) 

NA e 

1. 03 X 10 5 
(15) 

1.03X 10 6 
(150) 

0. 98 X 10 6 
(142) 

T , °C <*F) 

2816 

899 

3116 

871 

2808 

25 04 

2808 

2808 


(5100) 

(1650) 

(5640) 

(1600) 

(5086) 

(4540) 

(5086) 

(5086) 

I, N-sec/kg (see) 

2960 

2220 

2760 

2220 

2790 

3450 

2910 

2960 


(S00> 

(225) 

(280) 

(225 ) 

(283) 

(350) 

(295) 

(300) 

C 

40 

50 

40 

40 

30 

40 

60 

60 

L e i m (in. ) 

0. 25 

0. 076 

0.269 

0. 11 

0. 297 

G. 076 

0. 21 

0. 28 


(10) 

(3) 

(10.6) 

(4.3) 

(11.7) 

(3) 

(8.3) 

(11) 

D max' m (in> > 

0. 1 

0. 025 

0. 076 

0. 02 5 

0. 16 

0. 04 

0. 083 

0. 12 


(4) 

(i) 

(3) 

(1-0) 

(6.2) 

(1.6) 

(3.3) . 

(4.8) 

W £ , kg (lb) 

1.2 

0. 23 

1.4 

0. 24 

2, 1 

0. 68 

1. 32 

3. 67 


1 (2.7) 

(0. 50) 

(3.0) 

(0. 54) 

(4.6) 

(1.5) 

(2-9) 

(8. 1) 

Propellant Feed 

Pressurized 

Pressurized 

Pressurized 

Pressurized 

blowdown 

Pressurized 

Self pressur- 
ized blowdown 

N;> pressure 
regulated 

N£ pressure 
regulated 

Ignition 

Hypergolic 

Catalyst 

Hypergolic 

Catalyst 

Hypergolic 

Spark 

Hypergolic 

Hypergolic 

Development Status 

Advent 

Internal re- 
search and 
development 

! Internal re- 
search and 
development 

Comsat 

Internal re- 
search and 
development 

Development 

Former 

Transtage 

Former 

Transtage 

Storage Life, yr 

3 

Unlimited 

10 

2 

NA e 

1 

l 

1 

Restarts 

Unlimited 

Unlimited 

50, 000 

5000 

67,000 

Yes 

540 

650 

Power, continuous W 

60 

NA e 

NA e 

10 

NA e 

30 f 

MA e 

NA e 

Minimum Impulse, 
N-sec (lb-sec) 

0. 535 
(0. 12) 

0, 04 
(0.01) 

1. 11 
(0,25) 

NA e 

NA e 

NA e 

NA e 

NA e I 


a MMH = monomethylhydrazine = CH^NHNH^ 
^UDMH = unsymmetrical dimethylhydrazine 


C DNA = does not apply 

d O/F = weight of oxidizer /weight of fuel 


e NA = not available 

^Does not include electrolysis power 




An aggregate equation must be written relating 6 to the cabling 
characteristics to quantify the power aggregate equations. 

5. WEIGHT AGGREGATE EQUATION 

The weight aggregate equation can be expressed as the sum of the 
weights of components that satisfy pointing accuracy requirements, plus the 
weights of the lines, cables, connectors, fixtures, and hold structure. Also, 
the weight of the propellant (as determined by the propellant consumption 
aggregate equations), reserve propellant, and tankage must be included. 

^ Component Weight + f^ (lines, cables, connectors) 

+ f 2 (fixture, structure) + f 3 (propellant) 

The parameters contributing to the total weight of the ACS have been 
identified in the above equation. Aggregate equations incorporating these 
parameters must be written to quantify the total weight aggregate equation. 

6. VOLUME AGGREGATE EQUATION 

The volume aggregate equation can be expressed as the sum of the 
volumes of the components that satisfy the pointing accuracy requirement, 
divided by a packing efficiency factor. This factor accounts for the fact that 
the components are of various shapes and there must necessarily be some 
empty space. In addition, the volume associated with temperature control 
(cold plates, shrouds, etc.), lines, cables, and connectors must be 
considered. 


Volume = £ Component Volume + f^ (thermal control) 

+ (lines, cables, connectors) 


where 


*1 = packing efficiency factor 
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The parameters contributing to the total volume of the ACS have been 
identified in the above equation- Aggregate equations incorporating these 
parameters must be written to quantify the total volume aggregate equation. 

7. SPECIFICATION AGGREGATE EQUATIONS 

In the study, the approach taken to develop preliminary specifica- 
tions on vibration, temperature, and ambient pressure was the viewpoint of 
the ACS designer. Thus, these items are not treated as requirements 
imposed on the ACS, rather as ACS capabilities. The selected components 
used to mechanize the best system are then examined to determine, thd sys- ’ 
tern capability. 

In vehicle design, compromises must be made; obviously, further 
development of this model must provide for iterations to examine these pre- 
liminary specifications, compare them to predicted vehicle capabilities, and 
select alternate components to improve ACS capabilities, if necessary. This 
approach clearly shows the impact of increased vehicle requirements and 
provides a balance between those requirements imposed on the ACS and other 
vehicle systems. 

a. Vibration Specification Aggregate Equation 

The vibration specification aggregate equation, as a function of fre- 
quency, can be expressed as the minimum, at each frequency, of all the 
vibration specifications for components that satisfy the pointing accuracy 
requirement. The vibration specification aggregate equation can be written 
as 

Vibration Spec (freq) = Min jvibration Spec (freq) of Componentsj 

h. Temperature Specification Aggregate Equations 

The maximum temperature specification aggregate equation can be 
expressed as the minimum of all maximum temperature specifications for 
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components that satisfy the pointing accuracy requirement, and similarly 
for the minimum temperature specification. The temperature aggregate 
equations can be written as 


Max Temp Spec - Min jMax Temp Spec of Components 
Min Temp Spec = Max j Min Temp Spec of Components 


Ambient Pressure Specification Af 


;ate Equation 


The ambient pressure specification aggregate equation can be 
expressed as the minimum of all ambient pressure specifications for com- 
ponents that satisfy the pointing accuracy requirement. The ambient pres- 
sure specification aggregate equation can be written as 


Ambient Pressure Spec = Min j Ambient Pressure Spec of Componentsj 

D. SAFETY AGGREGATE EQUATIONS 
i. INTRODUCTION 

As a result of satisfying the performance aggregate equations, one 
will have a finite number of ACS configurations with hardware selected to 
meet the steady-state pointing accuracy requirements. The next step is to 
develop the three sets of equations under the main heading of safety. The 
three categories of aggregate equations to be discussed are the failure rate, 
failure detection probability, and false alarm probability aggregate equations. 

The basic ACS considered consists of four elements: sensor, signal 
processor, actuator, and energy source. The analysis was performed for 
each of the following variations of the basic system: 

a. The basic system alone, referred to as the single -string ACS, 
since no redundancy exists. A monitoring system is also 
included for purposes of status determination. 
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b. One ACS in the active (operating) mode with a complete ACS 
in a standby mode as a backup, together with necessary 
monitoring and switching equipment. 

c. Three ACSs in the active mode with a voter monitoring their 
performance with capability to censor any faulty ACS. 

For each of the configurations being considered, the following char- 
acteristics were derived (see Section 3 of Appendix D) using standard proba- 
bilistic techniques; 

a. Failure Rate : The failure rate for each configuration was 

determined on a module -by -module basis. (A module is 
represented by a single box in the reliability diagrams.) 

The module failure rate information was then combined by 
standard techniques (Ref. 2) into a reliability model express- 
ing the probability of equipment survival (reliability) as a 
function of time and module failure rates. The failure 

rate equations assume that all necessary failure detection 
monitoring is performed. 

b. Failure Detection Probability ; Expressions for the probabil- 
ity of detecting a failure were derived using failure rates for 
the monitoring and switching system. 

c. False Alarm Rates ; The overall failure rates for the monitor- 
ing and switching equipment were reduced to consider only 
those failure modes that would result in an incorrect failure 
indication or an untimely actuation of the switching system. 
Again, using standard techniques, the probability of such an 
event occurring was derived as a function of time and the 
partial failure rates. 

2. FAILURE RATE AGGREGATE EQUATIONS 

a. Single -String ACS 

The system failure rate is the sum of the individual module failure 
rates, and the system reliability Rg(t) is given by 

R s (t) = e" X a fc (4-17) 

where 

N 

\ = £ \ (4-18) 

a i = l 1 
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for N modules, and the individual module failure rates X. are functions of 

1 

part failure rates, duty cycles, environmental stress factors, and dormancy 
factors, as given in Section 3 of Appendix D. 

It is evident that successful ACS operation requires successful func- 
tioning of each module, i.e., there is no redundancy, and each module con- j 
stitutes a single-point failure hazard. 


b. Active ACS with Switched Standby ACS 

The system reliability is a function of the individual ACS module 
failure rates and the modes of failure of the monitor and switch.; 


R s (t) = e 


i +Vv, )t 


S 1 s 2 


a s j 


{X + X + \ ) 

a s 3 m j 


(qX + X +X + X + X -X -X) 
a s 3 m 1 s 4 m 2 m 3 s^ 




X 




~{qX +X +X +X +X -X -X )t 
e a s 3 m l s 4 m 2 m 3 S 5 


]! 


(4-19); 


where 

X = rate of switch failures open 
s i 

^ = rate of switch failures common, i.e., both ACSs actuated 

5 2 

- rate of monitor prematurely commanding switch to change 
1 states 


X = rate of switch changing state without command from monitor 

3 - 

X = rate of switch failing to actuate on command 
S 4 

X = rate of monitor failing to detect failure of active unit 
m 2 

= rate of monitor commanding switching from standby unit 
3 back to disabled active unit 


s = rate of switch changing state to put failed active unit on line, 
5 without command from monitor 
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X = the active single-string failure rate as given in Eq. (4-18) 

cl 

q\ = the standby string failure rate as given in Section 3 of 
Appendix D. 

c. Triply Active ACS with Voting 

In the model considered here, the monitor signal processors are 
triply redundant (active) to reduce the impact of failure there. That is, each. 
ACS has its own monitor signal processor, the outputs of which are acted on 
by the voter. The system reliability for this configuration is 

l 

-X t r -(X +x )t 

Rg(t) = e V [i - (1 - e a sp ) 3 ] (4-20) 


where 


3. 


a. 




= the active single-string failure rate as given in Eq. 
= the failure rate of the voter /switch 
= the failure rate of one monitor signal processor. 


(4-18) 


FAILURE DETECTION PROBABILITY AGGREGATE EQUATIONS 
Single -String ACS 

The expression for failure detection probability is 


P D (t) = | exp(— £ X mi t) 

1 = 1 


(4-21) 


where 


n = number of parameters monitored 

N = total number of functional parameters 

X . = failure rate of that portion of the monitoring system 
assigned to the ith parameter monitored. 
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where 

n = number of monitored parameters of each ACS 
N = total number of functional parameters of each ACS 
(^ v " *- g ) = failure rate of voter only, excluding the switch. 

4. FALSE ALARM RATE AGGREGATE EQUATIONS 

The false alarm rate refers to the frequency of failures: 

a. In the s ensor /signal processor, which make up the monitor- 
ing subsystem, resulting in a command to the switch to 
change state 

b. In the system selection switch, which results in a state 
change without a command. 
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The result of such a failure is that an active, properly functioning 
ACS is switched off-line, or erroneous status reports would go to the user 
and sacrifice of mission objectives would result. If ACS redundancy is still 
available, then this situation will not degrade performance immediately, but 
will likely result in a shortened mission duration. However, if ACS redun- 
dancy has been invalidated through previous failures, inadvertent switching 
will degrade mission performance. 

a. Single-String ACS 

The probability of false alarm P F is given by 

-X t ‘ : 

P F (t) = 1 - e m F ' . . (4 _ 24) 

where \ m is that portion of the monitoring system failure rate linked to a 
false alarm condition, specifically, that portion associated with a false status 
signal of failure being issued. 

h. Active ACS with Switched Standby ACS 

The probability of a false alarm is given by 

-(\ m +X g )t 

P F (t) = i - e m F F (4 _ 25) 

where is that portion of the switch failure rate linked to a change of 
state without a command from the monitor subsystem. 

c * Triply Active ACS with Voting 

The probability of false alarm is given by 

-(3\ +\ )t 

P F (t> = 1 - e P F V F (4-26) 


4-52 



where \ S p that portion of the signal processor failure rate associated 

with a false indication of failure in one of the three ACSs and is that 

v F 

portion of the voter failure rate that results in the censoring of one or 
more ACS inputs when the inputs are, in fact, acceptable. 

E. COST AGGREGATE EQUATIONS 

1. INTRODUCTION 

Two costing techniques are presented in this section. The first 
costing technique developed cost aggregate equations from a data base struc- 
ture consisting of a work breakdown structure (WBS), subdivision of work 
(SOW) and the elements of cost (EOC) approach. The above cost structure 
is similar, but not identical to the REDSTAR data base described in Sec- 
tion 2.B. The second costing technique developed cost aggregate equations 
based on the cost of the ACS components selected to satisfy the performance 
and safety requirements. This second technique, the one selected for com- 
puter implementation in this task, requires cost data to be formatted in a 
specific format, i.e., the format of Table 1-1. 

The objective of the cost aggregate equations is to determine the 
total cost of an ACS. The total cost of a system is subdivided by the SOW. 
The SOW described in the REDSTAR data base divides the total cost of a 
system into four cost categories: 

a. Design, development, test, and evaluation 

b. Non-recurring investment 

c. Recurring investment 

d. Operations. 

The total cost of an ACS, for both costing techniques, has been divided into 
the following more descriptive cost categories: 

a. Design and development (D&D) 

b. Build and checkout (B&C/O) 

c. Test hardware (TH) 
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d. Training and simulation (TS) 

e. Program life (PL) 

f. Management (MGMT). 

Each of these six cost categories can be found within the REDSTAR data 
base. The purpose of this breakdown is to determine the sensitivity of 
each of these six cost categories to changes in performance and safety 
requirements . 

2. COST AGGREGATE EQUATIONS - WBS/SOW/EOC APPROACH 

This section presents the six cost aggregate equations developed 
using cost analysis. The form of these cost aggregate equations is based 
on many years of costing experience. 

The WBS/SOW/EOC approach for developing cost aggregate equa- 
tions requires having detailed cost data in a format similar to the REDSTAR 
data base described in Section 2.B. 1. The form of the cost aggregate equa- 
tions is a product of a labor rate multiplied by the number of hours required 
to complete a specific activity. The six cost categories for which cost aggre 
gate equations were developed are 

a. Design and development 

b. Build and checkout 

c. Test hardware 

d. Training and simulation 

e. ' Program life 

f. Management. 

The costs being considered in this section are theoretical first unit costs. 

The first cost aggregate equation, design and development cost, is 
described by the following sum: 

Design and Development Cost = ED + TL + GSE + MU + TE +• TO 
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where 


ED - engineering design cost 
XL - tooling cost 

GSE = ground support equipment cost 
MU = mockups cost 
TE = test equipment cost 
TO = test operation cost. 

Each of these six costs is described by an equation. The engineering design 
cost equation is described as 

ED = (C E ) [MHPS + (MH/D) (ND) + MHSC + MHSE + MHDR] + LT ; 

where 

C E = engineering labor rate 

MHPS = man-hours to prepare specifications and parts lists 
MH/D = man-hours per drawings and diagrams 

ND = number of engineering drawings and wiring diagrams 
MHSC = subcontractor and vendor coordination man-hours 
MHSE = systems engineering and integration man-hours 
MHDR = data reduction and report preparation man-hours 

LT = laboratory test models, breadboards, and material costs. 

The tooling cost equation is described as 

TL = (C E+M ) (MHTL) + MTL 


where 

C F+ w = weighted average of engineering and manufacturing 
labor rates 

MHTL = man-hours for tooling design and manufacture 
MTL = tooling material cost. 
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The ground support equipment cost equation is described as 

GSE = (C E+M ) (MHGSE) + MGSE 

where 

MHGSE = ground support equipment man-hours 
MGSE = ground support material cost. 

The mockups cost equation is described as 

MU = (NMU) (PS) (STFU) 

where 

NMU = number of mockups 
PS = constant percent 

STFU = system theoretical first-unit cost (defined under build 
and checkout). 

The test equipment cost equation is described as 

TE = [(NFTH) b + NGTH] (STFU) [1 + PS] 

where 

NFTH = number of flight test subsystem equipment items 
NGTH = equivalent number of ground test subsystem equipment items 
b = slope of learning curve. 

The test operation cost equation is described as 

T ° = (C E+M ) K NGT ) (MH/GT) + (NFT) (MH/FT)] 

+ (NGT) (M/GT) + (NFT) (M/FT) 
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where 


NGT = number of ground tests 
MH/GT = man-hours per ground test 
NFT = number of flight tests 
MH/FT = man-hours per flight test 
M/GT = material costs per ground test 
M/FT = material costs per flight test. 

The build and checkout cost aggregate equation can be described as 
B&C/0= STFU = System Theoretical First-Unit Cost 
STFU = (C M ) (MH/STFU) + (M/STFU) 

where 

Cj^. = manufacturing labor rate 
MH/STFU = man-hour per system theoretical first unit 
M/STFU = material cost per system theoretical first unit. 

The test hardware cost aggregate equation can be described as 
TH = (C £ ) (DMHTH) + (C M ) (PMHTH) + MTH 

where 


C E = engineering labor rate 
DMHTH = test hardware design man-hours 
C M = manufacturing labor rate 
PMHTH = test hardware production man-hours 
MTH = test hardware material cost 
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as 


The training and simulation cost aggregate equation can be described 


TS = (C T ) (NTR) + (N) (PS) (STFU) 

where 

= training cost per trainee 
NTR = number of trainees 
N = number of simulations 
PS = constant percent 
STFU = system theoretical first-unit cost. 

The program life cost aggregate equation can be described as 

PL = OH + S + LO 

where 

OH = operational hardware cost 
S - spares cost 
LO = launch operations cost. 

The operational hardware cost equation can be described as 

OH = (STFU) (QS) b + TLS + ES 

where 

STFU = system theoretical first-unit cost 
QS = program quantities 
b = slope of learning curve 
TLS = tooling support cost 
ES = engineering support cost. 
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The spares cost equations can be described as 

S = <P) (OH) 

where 

P = constant percent 
OH = operational hardware cost. 

The launch operations cost equation can be described as 

( 

LO = (LO/Y) (NYO) 

where 

LO/Y = launch operations costs per year 
NYO = number of years of operation. 

The last cost aggregate equation to be described is the management 
cost aggregate equation. The management cost aggregate equation can be 
described as 


MGMT = (0. 05) [DhD + TE + TS] + (0. 03) (PL) 

The preceding cost aggregate equations, to be useful tools for estimating 
the ACS cost in the preliminary design phase, require data in a very detailed 
or WBS format. Unfortunately, such data is not available until a design 
has progressed into its intermediate phase because, while the dependent 
variables on the left side of the above cost aggregate equations correspond 
to the REDSTAR data base, the independent variables on the right side of 
the equations are not readily available in the preliminary design phase. An 
alternate costing technique, based on the costs of the ACS components 
selected to satisfy the performance and safety requirements, is described 
in Section 4. E. 3. This alternate technique, which is used in the Cost/ 
Performance Model, can be used to obtain preliminary cost estimates as 
a function of the preliminary ACS configurations. 
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3. COST AGGREGATE EQUATIONS - COMPONENT COST 
APPROACH 

The second costing technique, termed the "component cost approach," 
develops cost aggregate equations based on the cost of the ACS components 
selected via the performance and safety aggregate equations and require- 
ments. This costing technique requires that each ACS component have cost 
data available in a specific format, i. e. , Table 1-1 format. The ACSi con- 
sidered in this study consists of four major subsystems: sensors, signal 
processors, actuators, and energy sources (see Figure 4-7). 

The total cost of an ACS is the sum of its non-recurring cost alnd its 
recurring cost. The non-recurring costs are described in Section 4. E. 3. a f 
and the recurring costs, in Section 4.E.3.b. 

a. Non-Recurring Costs 

The total non-recurring cost is the sum of the non-recurring mate- 
rial cost and the non-recurring system engineering cost. The forrp. of the 
non-recurring material cost aggregate equation is a sum of the non-recurring 
costs of the ACS components, multiplied by an inflation factor. The first non- 
recurring material cost aggregate equation, the design and development non- 
recurring cost, is described as 

ACS(D8,D) nr = I[S(D&D) nr + SP(D&D) nr + A(DtD) NR + E(D&D) NR ] 
where 

ACS(D&D)^^ = ACS design and development non-recurring material 
cost 

S(D&D)j^,j^ = sensor design and development non-recurring mate- 
rial cost 

SP(D&D) nr = signal processor design and development non- 
curring material cost 

A(D&D) nr = actuator design and development non-recurring 
material cost 
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E(D&D)^ R = energy source design and development non-recurring 
material cost 

I = inflation factor. • 

The cost inputs on the right side of the above equation are available in 
Table 1-1. This fact increases the utility of this costing technique as com- 
pared to the previous costing technique. 

Similarly, the other four non-recurring material cost aggregate 
equations can be written as follows: 

5 - 

! 

ACS(B&C/0) nr = I[S(B&C/0) nr + SP(B&C/0) nr + A(B&c/o) NR ; ; 

+ E(B&c/o) NR 

. i 

where ACS(B&tC/0)^ R = ACS build and checkout non-recurring material cost; 

ACS(th >nr - "[SITHW + sp (™»NE + a '™>nr + e < th »nr] 

where ACS(TH)^ R = ACS test hardware non-recurring material cost; 

ACS(T&S) NR = l[S(T&S) NR + SP(T&S) NR + A(T?iS) NR + E(T&S) NR ] 

where ACS(T&S)^ R = ACS training and simulation non-recurring material 
cost; and 

ACS < PL >NR = ^Sf^NR + SP < PL >NR + A < PL >NR + E < PL > N rJ 

where ACS(PL)^ R = ACS program life non-recurring material cost. 

The total non-recurring material cost of an ACS is the sum of the 
non-recurring material costs for the design and development, build and 
checkout, test hardware, and program life. The total ACS non-recurring 
material cost aggregate equation can be written as 
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(ACS) nr = ACS(D&D) nr + ACS(B&C/0) nr + ACS(TH) nr 


+ ACS{T&S) nr + ACS(PL) nr 

where (ACS)^ R = total ACS non-recurring material cost. 

To obtain the total ACS non-recurring cost, one must add the total 
non-recurring system engineering cost to the total non-recurring material 
cost. The total non-recurring system engineering cost can be described as 

<tse) nr -- P T NR [< tse W + < ACS W* 

where 

(TSE)j^ = total non-recurring system engineering cost 
(ACS)j^ = total non-recurring material cost 

>(C 

P T = fixed percent = 0. 484 . 

NR 

The system engineering cost during the design and development phase can be 
described as 


se < d&d >nr = p i[< tse 'nr + < acs »nr] 

where P^ = fixed percent = 0.404T 

In a similar manner, the system engineering cost during the other 
four phases can be described as follows 


■Y* 

The form of the non-recurring system engineering aggregate equation and 
the percentages were obtained from the Honeywell cost analysis (Ref. 3). 
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SE(B&C/0) nr = P 2 [(TSE) nr + (ACS) nr] 


where = 0. 067 ' ; 


SE(TH) N R " P 3^ (TSE) NR + (ACS W 


where P_ = 0.013 


SE ' T&S »NR = P 4t< TSE >NR + < ACS > N r1 


where P^ = negligible * ; and 


SE(PL) NR ~ P 5^ TSEJ NR + (ACS) NrJ 


where P^ = negligible,* 

The total non-recurring cost T^ R can be described by the 

sum 


t nr = (ACS) nr + (TSE) nr 


b. Recurring Costs 

The total recurring cost is the sum of the recurring material costs 
and the recurring system engineering cost. The form of the recurring mate- 
rial cost aggregate equations is the sum of the recurring cost of the ACS 
components multiplied by an inflation factor. The first recurring material 
cost aggregate equation, design and development recurring cost, is 
described as 


The form of the non-recurring system engineering aggregate equation and 
the percentages were obtained from the Honeywell co st analysis (Ref. 3), 
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ACS(D&D) r = I[S(D&D) r + SP(D&D) r + A(D&D) r + E(D&D) R ] 

where 

ACS(D&D) r = ACS recurring design and development material cost 

S(D&D) r = sensor recurring design and development cost 

SP(D&D) = signal processor recurring design and development 
cost 

A(D&D) r = actuator recurring design and development cost 

E(D&D) = energy source recurring design and development 
cost 

I = inflation factor. 

In a similar manner, the other four recurring material cost aggre- 
gate equations can be written as follows 

ACS(B&C/0) r = I[S(B&C/0) r + SP(B&C/0) r + A(B&C/0) r 
+ E(B&C/G) r ] 

where ACS(B&C/0) R = ACS recurring build and checkout material cost; 
ACS(TH) r = I[S(TH) r + SP(TH) r + A(TH) r + E(TH) r ] 

where ACS(TH) R = ACS recurring test hardware material cost; 

ACS(T&S) R = I[S(T&S) r + SP(T&S) r + A(T&S) r + E(T&S) r ] 

where ACS(T&S) R = ACS recurring training and simulation material cost; 
and 


ACS(PL) r = I[S(PL) r + SP(PL) r + A(PL) R + E(PL) r J 
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where ACS(PJL) R = ACS recurring program life material cost. 

The total recurring material cost of an ACS is the sum of the recurring 
material costs for the design and development, build and checkout, test 
hardware, and program life. The total ACS recurring material cost aggre- 
gate equation can be written as 

(ACS) r = ACS(D&D) R + ACS(B&C/0) R + ACS(TH) R + ACS(T&S) R 
+ ACS(PL) r 

where (ACS) r = total ACS recurring material cost. 

To obtain the total ACS recurring cost, one must add the total recur- 
ring system engineering cost to the total recurring material cost. The total 
recurring system engineering cost can be described as 

(TSE) R = P TjJ TSE R + < ACS >r] 


where 

(TSE) r = total recurring system engineering cost 

(ACS) r = total recurring material cost 

P„ = fixed percent. 

R 

The total ACS recurring cost T R can be described by the sum 

T r = (ACS) r + <TSE) r 


The total cost T of a single ACS (less management) is the sum of 
the total recurring cost and the non-recurring cost: 


T = T + T 
NR R 
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If more than one ACS is produced, it is necessary to add a learning 
factor to the recurring system engineering cost. The derivation of the learn- 
ing curve used in the computer simulation is described in Appendix C. 

The only remaining cost item is the management cost. Management 
cost can be expressed as a percent of total ACS cost: 

Management = p (Management + T) 
where p = fixed percent. 

The component cost approach was the costing technique selected for 
use in the computer simulation. The reason for this choice is that compo- 
nent cost data in a Table 1-1 format appears easier to obtain than very detailed 
or WBS format data in the preliminary design phase of a program. 

F. SCHEDULE AGGREGATE EQUATIONS 

1. INTRODUCTION 

This section presents the schedule aggregate equations that deter- 
mine, in terms of performance and safety parameters, the amount of series 
time required, starting from the proposal phase, to develop an operational 
ACS. Instead of developing one schedule aggregate equation for the total pro- 
gram life of an ACS, which would be a formidable task, it was decided that 
separate schedule aggregate equations for each major phase of the life cycle 
of an ACS would be more tractable. The life cycle of most systems can be 
divided into the following nine major phases: 

a. Proposal 

b. Preliminary design and system analysis 

c. Subsystem analysis, design, and breadboard testing 

d. Prototype design, fabrication, and test 

e. Subsystem production engineering, fabrication, and test 

f. System integration and test 

g. Flight test phase (1 to 5 flights) 
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h. Initial operational phase (6 to 20 flights) 

i. Operational phase (remaining flights). 

Before quantitative relationships could be developed that would relate 
schedule to performance and safety parameters, it was necessary to identify 
the pertinent schedule parameters involved in each of the nine major phases. 
The first schedule parameters considered were sequence restraints, man- 
loading limitations, production quantity, production rate, and delivery span. 

It was very difficult to write schedule aggregate equations using only these 
five parameters; thus, other parameters affecting schedules were identified. 
Table 4-9 depicts the schedule analysis matrices consisting of all pertinent 
parameters that impact schedule. In addition to identifying and listing the 
schedule parameters in a matrix format, flow charts of the major life-cycle 
activities were used to show the interrelationships between life-cycle 
activities (see Figure 4-8). 

The technique developed to estimate the amount of time necessary 
for completing a particular life-cycle activity is to estimate the necessary 
manpower, in man-months, required to complete a particular life-cycle 
activity, and then to divide the estimate by the average number of men avail- 
able for performing that activity. This technique can be expressed in a sim- 
ple equation: 


Tg = MP/M 


where 


Tg - series time to complete a specific design phase (months) 

Mf 5 _ manpower needed to complete a specific design phase 
(man-months) 

M - average number of men available during a specific phase 
(men). 
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Figure 4-8. Attitude Control System (Life -Cycle Activities) 
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Figure 4-8. Attitude Control System (Lif^-Cycle Activities) 
(Continued) 












Table 4-9. Attitude Control System Schedule Analysis Matrix 


Phase 


Proposal 


Preliminary Design 
and System Analysis 


Activity 


Typical Products 


Mission analysis 
and primary 
performance 
requirements 


Preparation of 
system specifi- 
cations and pre- 
liminary sub- 
system 

specifications 

System analyses 
and syntheses 

System layout 
and configura- 
tion drawings 


Orbit characteristics 
Gross vehicle sizing 
Propulsion 
Weight 
Power 

Payload 

characteristics 

Guidance and 
navigation 
ac curacies 

Mission event 
timelines 


Initial system and 
subsystem perfor- 
mance, design and 
verification 
requirements 

Functional 

requirements 

Reliability, 

maintainability 

Environmental 

requirements 

Preliminary 

physical 

features 

Development, 
reliability, and 
qualification test 
requirements 

Stability and sensi- 
tivity analyses 

Subsystem configu- 
ration layouts 

Support policies and 
philosophies 


Sequence 

Restraints 

(Prerequisites) 


Basic mission 
purpose and 
objective 
definition 

RFP or con- 
tract go-ahead 
(normally) 

Required 
mission 
launch dates 


Basic vehicle 
definition 

Size 

envelopes 

Weight 

allocation 

Functions 

and 

accuracies 

Launch site 
b election 


Schedule Considerations and Constraints 


Man- Loading 

Limitations 


Skill related - no 

significant 

constraints 


Some parallel 
activities after 
system specifi- 
cation prepared 


Production Quantity/ 
Production Rate/ 
Delivery Span 


Will affect reliability 

verification 

requirements 


Other Factors 
Affecting Length of 
Accomplishment 


Type of mission 

Complexity of 
orbit maneuvers 

Mission duration 

Mission require- 
ments (payload, etc- ) 

Characteristics of 
other stages 

Performance 

Design 

Prior application 

Level of develop- 
ment 

Management factors 
Contracting status 

Status of program 
approval 

Required control 
accuracies 

Severity of mission 
environment 

No. of interfaces and 
extent of definition 

Power 

Guidance and 
navigation 

Telemetry 

En vi ronmental 
control 

Structures 

No. of participating 
contractors 

No- of control loops 
Redundancy requirements 
Reusability considerations 


Applies only to production quantity 

/ 
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Table 4-9. Attitude Control System Schedule Analysis Matrix (Continued) 





Schedule Considerations and Constraints 1 

Phase 

Activity 

Typical Products 

Sequence 

Restraints 

(Prerequisites) 

Man -Loading 
Limitations 

Production Quantity/ 
Production Rate/ 
Delivery Span 

Other Factors 
Affecting Length of 
Accomplishment 

Subsystem Analysis 
and Design 

Preparation of 
subsystem /com- 
ponent perfor- 
mance/design 
specifications 

Preparation of 

interface 

specifications 

Subsystem per- 
formance analyses 
and syntheses 

Long-lead item 

procurement 

specifications 

Detailed circuit 
analyses and 
designs 

Subsystem /component 
perfo rmance /design 
and verification 
requirements 

Make-or-buv decision 

Functional interface 
requirements 

Performance 

Environment 

requirements 

Interface verifica- 
tion requirements 

Schematic and 
drawings 

System/sub- 
system per- 
formance 
requirements 

System con- 
figuration 
layouts 

Identification 
of participating 
contractors 


Will affect reliability 
verification 
requirements a 

Same aa above 

In-house fabrication 
vs subcontract 

breadboard Test i 

1 

B readboard 
design and test 
plans 

Breadboard 
fabrication and 
tests 

Purchasing 

Breadboard and 
required functional 
ve rification 

Breadboard 
layouts and 
required 
functional 
verification 

Initial verifi- 
cation of sub- 
system and 
component 
functional 
operation 

Initiation of 
long-lead item 
purchases 

Physical layout 
for test 

No. and type of 
functional verifi- 
cations (i, e. , no. 
of disciplines 
involved) 

Fabrication/ 
assembly physical 
limitations 


Required accuracy 
and tolerances 

Degree of initial 

verification 

required 

No. and type of 
interfaces 

Anticipated environ- 
ment (e. g. , EMC, 
temper atu re) 

No. of major high 
! reliability parts 

Type of component 
and degree of prior 
use/application 
(screening 
requirements) 


Applies Only to production quantity 
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Table 4-9. Attitude Control System Schedule Analysis Matrix (Continued) 


Phase 

n 

Activity 

Typical Products 

Schedule Considerations and Constraints | 

Sequence 
Restraints 
(P rerequisites) 

Man - Loading 
Limitations 

Production Quantity/ 
Production Rate/ 
Delivery Span 

Other Factors 
Affecting Length of 
Accomplishment 

P rotor ype Design, 
Fabrication, and 
T esr 

Subsystem 
package and 
prototype design 

System /sub- 
system 
simulations 

Support analysis 
and equipment 
design 

Configuration 

moekups 

Interface 

drawings 

Qualification and 
reliability test 
plans 

Development test i 
plans, procedures, 
and equipment ' 

Prototype | 

fabrication 

Subsystem 
functional and 
prequalification 
testing 

Tested prototype 
design 

F unctional 

Selected 

environments 

Initial software 
requirements 

Definition Of physical 
interfaces 

Qualification and 
reliability test 
sequences, schedules 
and equipment 
requirements 

Definition of check- 
out and maintenance ; 

requirements and 
equipment 

Initial spares analysis 

1 

1 

1 

Program de - 
velopment 
decision (it 
required) 

Breadboard 

test 

Finalized inter- 
face specifica- 
tions 

Sequence 

requirements 

T est sequenc- 
ing require- 
ments (i. e. , 
ambient check- 
out prior to 
environment; 
temperature 
soak; etc.) 

Teet equip- 
ment/ 
chamber 
available 

Required 

assembly 

sequence 



Fabrication/ 
assembly physical 
constraints and 
sequencing 

Test sequencing 
requirements 

Will affect support 
analysis and equip- 
ment a 

Checkout equip- 
ment configuration 
no. and location 

Transport analysis 
and equipment 

Quantity and 
schedule of 
spares 

Required ACS 
accuracies and 
tolerances 

Type and severity 
of anticipated 
environments 

No, of environments 

No. of outputs to be 
checked 

Type of components and 
degree of prior use/ 
application 

State of interfacing sub- 
system and contractor 
design /testing 

Extent of breadboard 
verification accomplished 

Complexity of interfaces 


a 

Applies only to production quantity 
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Table 4-9* Attitude Control System Schedule Analysis Matrix (Continued) 


Phase 

Activity 

Typical Products 

* Schedule Considerations and Constraints 1 

Sequence 
Restraints 
(Prerequi sites) 

Man- Loading 
Limitations 

Production Quantity/ 
Production Rate/ 
Delivery Span 

Other Factors 
Affecting Length of 
Accomplishment 

Subsystem Produc- 
tion Engineering, 
Fabrication, and 
Test 

Production design 
and assembly 
drawings 

Production and QC 
specifications 

Qualification, re- 
liability, and 
acceptance test 
procedures and 
equipment 

Purchasing and 
tooling (including 
facilities) 

Subsystem fabri- 
cation and 
assembly 

Subsystem quali- 
fication and re- 
liability testing 

Subsystem 
acceptance teats 

Subsystem 

delivery 

Delivery of accepted 
production subsystem 
configuration re- 
sulting from qualifi- 
cation and reliability 
testing (including 
spares and ground 
equipment) 

Signed interface 
drawings 

Production go- 
ahead decision 

Complete 
qualification 
prior to 
acceptance 

Assembly 
sequence re- 
quirements 

Test 

sequencing 

requirements 

Test equipment/ 
facility availability 
Personnel 
training 

Test facility 
physical limita- 
tions 

Test sequence 

Assembly area 
physical limita- 
tions 

Skill mix availa- 
bility 

Tooling configuration 
and setup heavily 
dependent upon pro- 
duction quantity, 
production rate, and 
delivery span a 

Tooling sophisti- 
cation 

Station no. and 
configuration 

Inspection pro- 
cedures 

Assembly auto- 
mation degree 

Facility space 
requirements 
Personnel no. 

Required production 
tolerances 

Degree of acceptable 
post-acceptance test 

No, , type, and severity 
of environment 

Degree of previous part 
use /application (extent 
of qualification/ relia- 
bility testing) 

Complexity and type 
of interfaces 

No, of outputs to be 
checked 

Cleanliness require- 
ments 


* Applies to aLl three categories 
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Table 4-9. Attitude Control System Schedule Analysis Matrix (Continued) 


Phasr 

— 

Activity 

Typical Products 

Schedule Considerations and Constraints 1 

Sequence 

Restraints 

(Prerequisites) 

Man- Loading 
Limitations 

Production Quantity/ 
Production Rate/ 
Delivery Span 

Other Factors 
Affecting Length of 
Accomplishment 

System tniog ration 

System installation 
and assembly 

System qualific a- 
tion tests 

System accept- 
ance tests 

Delivery of accepted 
production system 
configuration re- 
sulting from system 
qualification testing 

Receipt of 
accepted sub- 
system 
assemblies 

Complete quali- 
fication prior to 
acceptance 

Ass embly 
sequence re- 
quirements 

Test sequencing 
requirements 

Test equipment 

facility 

availability 

Personnel 

training 

Test facility 
physical limita- 
tions 

Assembly area 
physical limi- 
tations 

Skill mix 
availability 

Vehicle space 
limitations 

Same as subsys- 
tem production 
engineering, fabri- 
cation, and tcst a 

Required assembly 
tolerance 

Degree and type of 
inspection 

Cleanliness requirements 

Complexity and type of 
inte rfaces 

Degree of previous appli- 
cation of assembly 

Type and automation of 
testing 

Location of assembly site 
Location of test site 
Number of subsystems 


Applies to all three categories 
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Table 4-9. Attitude Control System Schedule Analysis Matrix (Continued) 






Schedule Considerations and Constraints 

Phase 

Activity 

Typical Products 

Sequence 

Restraints 

(Prerequisites) 

Man - Loading 
Limitations 

Production Quantity/ 
Production Rate/ 
Delivery Span 

Other Factors 
Affecting Length of 
Accomplishment 

Launch Checkout 
and Flieht Test 

Preflight monitor- 
ing and. checkout 

Mission simulation 
Flight operations 
Flight monitoring 

Post-flight 

evaluation 

Special testing 
Logistic support 

Preventive and 

corrective 

maintenance 

Accomplishment of 
mission objectives 

Problem evaluation 

Implementation of 
required design 
changes 

Receipt of 
accepted system 

Launch complex 
supply and 
checkout 

Facilities 

Expendables 

Ground 

checkout 

equipment 

T rained 
personnel 

Vehicle servicing 
and checkout 
sequencing re- 
qui rements 

Vehicle checkout 
area physical 
characte ristics 

Skill and mix of 
available manpower 

Launch rate will 
influence structure 
of launch complex 
and checkout a 

High rate will re- 
quire higher degree 
of automation 2 

: Multi-pad complex 

| if checkout servicing 
time > launch rate- 
significant manpower 
impact 2 

Potential subsystem 
or system storage 
if checkout servicing 
and launch rate > 
most efficient 
production rate 2 

Location of launch site 
Mission characteristics 

Degree and type of 
problem areas 

Required change 
verification 

Maintenance philosophy 
and policy 

Organization 

Field 

Depot 

Extent and type on 
ground mission 
simulation 

Complexity of sub- 
system and interfaces 

Checkout policy 

Degree of automation 
Integral vs remote 
No. of launch pads 
No, of test sets 
Reusability 


a 


Applies only to delivery span 




Manpower aggregate equations were written to estimate the required 
manpower; as a starting point, the equations used all the parameters identi- 
fied in the schedule analysis matrices and life-cycle flow charts. Since the 
proposal phase in most of the designs reviewed was approximately 3 months, 
independent of functional requirement, the first life -cycle activity for which 
a gg re gate equations will be developed is the preliminary design and system 
analysis phase. 

2. PRELIMINARY DESIGN AND SYSTEM ANALYSIS 
AGGREGATE EQUATION 

The preliminary design and system analysis phase begins with the 
authorization to proceed (ATP) and ends with the preliminary design review 
(PDR). The first step in developing a manpower aggregate equation for the 
preliminary design and system analysis phase was to list the major activi- 
ties of this phase. The schedule analysis matrices and flow charts developed 
in the previous section were used as a master list from which to select those 
activities pertinent to the preliminary design and system analysis phase. 
Table 4-10, developed by a panel of control engineers with many years of 
program experience, lists the major activities perforrned during this phase. 
The list will be used throughout the other seven life-cycle phases, except for 
minor additions or deletions. 

The first major activity in Table 4- 10 is the program plans activity. 
The manpower aggregate equation for this activity was estimated by the panel 
of control engineers to be a constant, 27 man-months, independent of func- 
tional requirements. 

The second major activity in Table 4-10 consists of developing lay- 
outs, diagrams, schematics, etc. The manpower aggregate equation for 
each task is shown in Table 4-11. The forms of the equation and the coeffi- 
cients were estimated by the panel of control engineers, using previous ACS 
manpower program requirements. 
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Table 4-10. Major Activities During Preliminary Design System 
Analysis Phase 

I. Program plans 

A. Master program plans 

B. Subsystem specifications and requirements 

C. Test plans, manufacturing plans, quality assurance plans, 
reliability plans, engineering development plans 

D. Interfaces with other subsystem, vehicle, and ground sup- 
port equipment 

E. Subcontractor plans and specifications 

F. Quality test plans 

II. Mechanical layouts, mathematical block diagrams, interface 
control diagrams, detailed drawings, long-lead items, func- 
tional block diagrams, schematics 

III. Analyses (stability, error, simulation, structural, thermal, 
reliability, circuit) 

IV. Design (electrical, mechanical, test hardware, tooling) 

V. Contractor liaison 

VI. Subsystem program management 

If the schedule aggregate equations are to be implemented, the 

values for the independent variables must be selected. The value for N c 

o 

can be determined by comparing the cost of a single-string, active /standby, 
and triply redundant configuration that have met the performance and safety 
requirement and by using, for example, the cheapest configuration for the 
value of Ng. The other values, i.e. , N c yg and N-g^g, must be selected by 
the system designer; by an iteration technique, he can compute the sensi- 
tivity of schedule time to these parameters. 
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Table 4-11. Manpower Aggregate Equations for Layouts, 
Diagrams, and Schematics 


Task 

Task Aggregate Equation 
(man-months) 

Mathematical Block Diagrams 

°- 2N C/S N S 

Interface Control Diagrams 

°- 3 N c/s N s 

Mechanical Layouts 

°* 5 n b/s n s 

Detailed Drawings 

°* 5 n b/s n s 

Long -Lead Items 

1. 0 

, 

B/S 

Functional Block Diagrams 

°- 1N B/S N S 

Schematics 

‘• on b/s 

where 


* 

M = Single-string 

Ng = number of ACS modules. 

Ng = < 2 = active /standby 


( 3 = triply redundant I 

Nq - number of control functions per ACS module 

N B/S = number of boxes per ACS module 
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The third major activity in Table 4-10 consists of analyses. The 
manpower aggregate equation for each task is shown in Table 4-12. 


Table 4-12. Manpower Aggregate Equations for Analyses 


Task 

Task Aggregate Equation 
(man-months) 

Stability Analysis 

‘• 0N C/S N S 

Error Analysis 

‘• 0N C/S N S 

Simulations 

‘• 0 N c/s N s 

Structural Analysis 

1-0 N c/s N s 

Thermal Analysis 

°- 5N C/S N S 

Reliability Analysis 

0-5 n b/s 

Circuit Analysis 

‘• 0N C/S N S 


The fourth major activity in Table 4-10 consists of design activities. 
The manpower aggregate equation for each task is shown in Table 4-13. 


Table 4-13. Manpower Aggregate Equations for Design Activities 


Task 

Task Aggregate Equation 
(man-months) 

Electrical Design 

‘• 0N C/S N S 

Mechanical Design 

2 - 0N B/S 

Test Hardware Design 

°- 5n b/s 

Tooling Design 

°- sn b/s 
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The last two major activities in Table 4-10, contractor liaison and 
subsystem program management, will each require a manpower of 3 
man-months . 

The manpower aggregate equation for the preliminary design and 
system analysis phase can be described as the sum of the task aggregate 
equations for each activity performed during the phase: 

M p ! = 33 man-months + 7. 0 N g + 1.1 N B/S Ng + 5. 5 N^g 

where MP ^ = preliminary design and system analysis manpower. 

To illustrate the use of this manpower aggregate equation for 
determining schedules, assume that a three-axis ACS (i.e. , N^g = 3, three 
control functions per ACS module) is to be mechanized to have triple redun- 
dancy and is to be packaged in four boxes per ACS module {i. e. , Ng^g = 4). 
Substituting these numbers in the above manpower aggregate equation, one 
obtains a manpower requirement of 104.2 man-months. To estimate the 
amount of time needed to complete the preliminary design and system anal- 
ysis phase, one must estimate the average number of men available during 
the phase. Assuming that one has 20 men available, then the time to complete 
this phase will be 5.21 months. 

3. SUBSYSTEM ANALYSIS, DESIGN, AND BREADBOARD 
TESTING AGGREGATE EQUATIONS 

The subsystem analysis, design, and breadboard testing phase begins 
with the completion of the PDR and ends with the midterm design review 
(MDR). 

Table 4-14 lists the major activities performed during the subsys- 
tem analysis, design, and breadboard testing phase. 

The first major activity in Table 4-14 is the program plans mainte- 
nance. The manpower aggregate equation for this activity was estimated by 
the panel of control engineers to be a constant, 6 man-months, independent 
of functional requirements. 
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Table 4-14. Major Activities During Subsystem Analysis, Design, 
and Breadboard Testing Phase 

I* Program plans maintenance (The program plans developed during 
the preliminary design and system analysis phase must be 
maintained. ) 

II. Diagrams, layouts, schematics, long-lead items 

III. Analyses (same tasks as in preliminary design and system anal- 
ysis phase with emphasis now on circuit analysis) 

IV. Design (electrical, mechanical, tooling, test hardware) 

V. Breadboard fabrication and tests 

VI. Quality assurance 

VII. Product engineering and manufacturing liaison 

VIII. System test liaison 

IX. Contractor liaison 

X. Subsystem program management 

The second major activity in Table 4-14 consists of developing 
layouts, diagrams, schematics, etc. The manpower aggregate equation 
for each task is shown in Table 4-15. 
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Table 4-15. Manpower Aggregate Equations for Layouts, 
Diagrams, and Schematics 


Task 

Task Aggregate Equation 
(man-months) 

Mathematical Block Diagrams 

°- 1 N C/S N S 

Interface Control Diagrams 

°- 15N c/s N s 

Mechanical Layouts 

°- 25 n b/s n s 

Detailed Drawings 

°- 25n b/s n s 

Long -Lead Items 

‘• on b/s 

Functional Block Diagrams 

“- 1 n b/s n s 

Schematics 

3 - 0N b/s 

where 

Ng = number of ACS modules, Ng = 

/ 1 = single-string 
< 2 = active /standby 

3 = triply redundant 

N^g = number of control functions per ACS module 

l^B /s ~ number of boxes per ACS module 


The third major activity in Table 4-14 consists of analyses. The 
manpower aggregate equation for each task is shown in Table 4-16. 
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Table 4-16. Manpower Aggregate Equations for Analyses 


Task 

Task Aggregate Equation 
(man-months ) 

Stability Analysis 

1 * 0N C/S N S 

Error Analysis 

U 0 N c/s*s' 

Simulations 

‘• 0 N c/s N s 

Structural Analysis 

‘• 0 N c/s N s 

Thermal Analysis 

‘• 0 N c/s N s 

Reliability Analysis 

°- 5 N B/s 

Circuit Analysis 

3 - 0n b/s n s 


The fourth major activity in Table 4-14 consists of design activities 
The manpower aggregate equation for each task is shown in Table 4-17. 


Table 4-17. Manpower Aggregate Equations for 
Design Activities 


Task 

Task Aggregate Equation 

(man-months) 

Electrical Design 

8 - 0 N c/s N s 

Mechanical Design 

4 - 0N B/s 

Tool Design 

°' 5n b/s 

Test Hardware Design 

°- 5n b/s 
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The fifth major activity in Table 4-14 is the breadboard fabrication 
and tests. The manpower aggregate equation for this activity can be 
described by - 


MP (breadboard fabrication and tests) = 1.0 N c . N +0.5N N 

SI/B B ' SO/B B 


where 


N SI/B = num ker of input signals per box 

^SO/B = num ^ er output signals per box 
N b - number of boxes per ACS module. 

The sixth major activity in Table 4-14 is the quality assurance 
activity. The manpower aggregate equation for this activity can be 
described as 

MP (quality assurance) = 3.0 N_ 

B / S 

The last two major activities in Table 4-14, product engineering 
and manufacturing liaison, and system test liaison — will each require a 
manpower of 6 man-months* 

The manpower aggregate equation for the subsystem analysis, 
design, and breadboard testing phase can be described as the sum of the 
task aggregate equations for each activity performed during the phase. 

MP Z = 18 man-months + 13.25 N c/g N g + 3.6 N R /g N g + 12.5 N R /g 

+ 1 - 0N SI/B n b + 0 - 5n so/b n b 

where MPj = subsystem analysis, design, and breadboard testing manpower. 
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4 . 


PROTOTYPE DESIGN, FABRICATION, AND TEST 
AGGREGATE EQUATION 

The prototype design, fabrication and test phase begins with the 
MDR and ends with the critical design review (CDR). The output of this 
design phase consists of two engineering models. The first engineering 
model undergoes a qualification test and remains with the contractor. The 
second engineering model undergoes an acceptance test and is used for simu- 
lation purposes; it also remains with the contractor. 

Table 4-18 lists the major activities performed during the proto- 
type design, fabrication, and test phase. 

Table 4-18. Major Activities During Prototype Design, Fabrication, 
and Test Phase 

Program plans maintenance (The program plans that were 
developed during the preliminary design and system analysis 
phase and that continued through the subsystem analysis, design, 
and breadboard testing must be maintained. ) 

Diagrams, layouts, schematics, long-lead items 

Analyses (same categories as in the preliminary design and sys- 
tem analysis phase, with emphasis now on worst case circuit 
analyses) 

Design (electrical, mechanical, tooling, test hardware) 

Engineering model fabrication and test 
Quality assurance 

Packaging engineering and manufacturing liaison 
System test liaison 
Contractor liaison 
Subsystem program management 


I. 

II. 

III. 

IV. 

V. 

VI. 

VII. 

VIII. 

IX. 

X. 
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The first major activity in Table 4-18 is the program plans 
maintenance. The manpower aggregate equation for this activity was esti- 
mated by the panel of control engineers to be a constant, 12 man-months, 
independent of functional requirements. 

The second major activity in Table 4-18 consists of developing lay- 
outs, diagrams, schematics, etc. The manpower aggregate equation for 
each task is shown in Table 4-19. 


Table 4-19. Manpower Aggregate Equations for 
Layouts, Diagrams, and Schematics 


Task 

Task Aggregate Equation 
(man-months) 

Mathematical Block Diagrams 

°-‘ N C/S N S 

Interface Control Diagrams 

°- 3N c/s N s 

Mechanical Layouts 

°- 15 N B/s N s 

Detailed Drawings 

4-0 n b/s n s 

Long -Lead Items 

°' 5n b/s n s 

Functional Block Diagrams 

°- 1 n b/s n s 

Schematics 

- 

1-0 n b/s n s 


The third major activity in Table 4-18 consists of analyses. The 
manpower aggregate equation for each task is shown in Table 4-20. 
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Table 4-20. Manpower Aggregate Equations for Analyses 


Task 

Task Aggregate Equation 
(man-months ) 

Stability Analysis 

‘• 0 N c/s N s 

Error Analysis 

‘• 0N C/S N S 

Simulations 

2 - 0 N c/s N s 

Structural Analysis 

‘• 0 N c/s N s 

Thermal Analysis 

'■ 5 N c/s N s 

Reliability Analysis 

‘• 5 N c/s N s 

Circuit Analysis 

3 - 0 N c/s N s 


The fourth major activity in Table 4-18 consists of design activities. 
The manpower aggregate equation for each task is shown in Table 4-21. 

Table 4-21. Manpower Aggregate Equations for Design Activities 


Task 

Task Aggregate Equation 
(man -months ) 

Electrical Design 

2 - 0N C/S N S 

Mechanical Design 

3 - 0N C/S N S 

Test Hardware Design 

3 - 0N C/S N S 

Tooling Design 

3-0 N c/s N s 


The fifth major activity in Table 4-18 consists of the engineering 
model fabrication and test phase. The manpower aggregate equation for 
this activity can be described by 
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where 


M p a (1 + K p ) (1 + K r ) (2 N si/b N b/s + lNg 0/B N B/g ) 


MP = engineering model fabrication and test manpower 

cL 

Ngj/B = number of input signals per box 
NgQ/B = num her of output signals per box. 


Accuracy Ranges 

K 

P 

2° to 10° 

0 

0. 2 9 to 2° 

0. 2 

0. 02° to 0.2° 

0.4 


Reliability Ranges 

K 

r 

0,7 to 0.5 

0 

0. 9 to 0. 7 

0.05 

0.999 to 0. 9 

0. 10 


The manpower aggregate equation for the sixth major activity, 
quality assurance, can be described by 

MP(quality assurance) = 3.0 N„ 

/ o 


The manpower aggregate equation for the seventh major activity, 
packaging engineering and manufacturing liaison, can be described by 


MP(packaging engineering and manufacturing liaison) = 4. 0 N 


B/S 


The manpower aggregate equation for the eighth activity, system 
test liaison, was estimated by a panel of control engineers to be a constant, 
6 man-months. 

The last two major activities, contractor liaison and subsystem 
program management, will each require a manpower of 6 man-months. 

The manpower aggregate equation for the prototype design, fabri- 
cation, and test phase can be described as the sum of the task aggregate 
equation for each activity performed during the phase: 
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MP 3 = 24 man-months + 11.4 N c/S N g + 4. 25 N n /Q N«, + 8.5N 


B /S 1N S 


+ (1 + K p ) (1 + K r ) (2.0 N si/b N b/s + 1.0 N so/b N e/s ) 

where MP g = prototype design, fabrication, and test manpower. 

5. SUBSYSTEM PRODUCTION ENGINEERING, FABRICATION, 

AND TEST AGGREGATE EQUATIONS 

The subsystem production engineering, fabrication, and test phase 
begins with the completion of the CDR and ends with the fabrication and quali- 
fication testing of two ACSs. The first qualification unit is subjected to the 
acceptance and qualification tests. The second qualification unit is subjected 
to acceptance tests and is used in a vehicle level acceptance test. 

Table 4-22 lists the major activities performed during the subsystem 
production engineering, fabrication, and test phase. 

Table 4-22. Major Activities During Subsystem Production 
Engineering, Fabrication, and Test Phase 


I. Program plans maintenance (The program plans developed during 
the preliminary design and system analysis phase must be 
maintained. ) 

II. Diagrams, layouts, schematics, long-lead items 

III. Analyses 

• Design (electrical, mechanical, tooling, test hardware) 

V. Production engineering, fabrication, and test 

VI. Quality assurance 

VII. Packaging engineering and manufacturing liaison 

VIII. System test liaison 

IX. Contractor liaison 

X. Subsystem program management 
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The first major activity is the program plans maintenance. The 
manpower aggregate equation for this activity was estimated by the panel of 
control engineers to be a constant, 12 man-months, independent of func- 
tional requirements. 

The second activity consists of developing interface control diagrams 
and detailed drawings. The manpower aggregate equation for each task is 
shown in Table 4-23. 


Table 4-2 3. Manpower Aggregate Equations for Interface 
Control Diagrams and Detailed Drawings 


Task 

Task Aggregate Equation 
(man-months) 

Interface Control Diagrams 
Detailed Drawing 

°- 3 N c/s N s 

°- 3 N C/S N S 


The third activity consists of analyses. The manpower aggregate 
equation for each task is shown in Table 4-24. 


Table 4-24. Manpower Aggregate Equations for Analyses 


Task 

Task Aggregate Equation 
(man-months) 

Stability Analysis 

°- 3 N c/s N s 

Error Analysis 

°- 3 N c/s N s 

Simulations 

°" 3 N c/s N s 

Structural Analysis 

°* 3 N c /s N s 

Thermal Analysis 

°- 3N C/S N S 

Reliability Analysis 

°-‘ N B/s 

Circuit Analysis 

°- 5n b/s n s 
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The fourth activity consists of design activities. The manpower 
aggregate equation for each task is shown in Table 4-25. 


Table 4-25. Manpower Aggregate Equations for 
Design Activities 


Task 

Task Aggregate Equation 

(man-months) 

Electrical Design 

4 * 0 N C/S N S 

Mechanical Design 

2 - 0N B/s 

Test Hardware Design 

2 - 0N b/s 

Tooling Design 

2 - on b/s 


The manpower aggregate equation for the production engineering, 
fabrication, and test phase can be described by 

MP{production engineering, fabrication, and test) =12 N^g Ng 


The manpower aggregate equation for quality assurance can be 
described by 


MP(quality assurance) =2.0 

15 / o 

The manpower aggregate equation for the packaging engineering and 
manufacturing liaison can be described by 

MP{packaging engineering and manufacturing Liaison) = 2.0 N,, /c . 

o /o 

The manpower aggregate equations for each of the last three activi- 
ties, namely, system test liaison, contractor liaison, and subsystem pro- 
gram management were estimated to be a constant, namely, 6 man-months. 
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The manpower aggregate equation for the subsystem production 
engineering, fabrication, and test phase can be described as the sum of the 
task aggregate equations for each activity performed during the phase 

MP 4 = 30 man-months + 6. 1 N c/S N g + 12. 5 N B/g N g + 10. 1 N R/S 

where MP 4 = subsystem production engineering, fabrication, and test manpower. 
6. SYSTEM INTEGRATION AND TEST AGGREGATE EQUATIONS 

The system integration and test phase consists of integrating the 
ACS into the space vehicle and performing an acceptance test on the ACS 
after this integration. 

Table 4-26 lists the major activities performed during the system 
integration and test phase. 

Table 4-26. Major Activities During System 
Integration and Test 

Program plans maintenance 
System integration 
Tests 

Contractor liaison 

Subsystem program management 

— 

The first major activity is the program plans maintenance. The 
manpower aggregate equation for this activity was estimated to be a con- 
stant, 6 man-months. 

The manpower aggregate equation for the system integration phase 
can be described by 

MP (system integration) = 0.2 N B/g N g 


I. 

II. 

III. 

IV. 

V. 
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The manpower aggregate equation for the test phase can be 
described as 


MP (tests) = (1 + K m ) (1 + K p ) (1 + K r ) (0. 1 N gI/B 


N. 


B/S 


+ 0. 3 N 


SO/B 


n b/s> 


where 


j 

K 

m 

1 

0 

2 

0. 1 

3 

0. 15 

4 

o 

5 

0.25 | 


Kp and Kj. are defined in Section 4. F.4 and j is the 
number of operational modes of the ACS. 


The last two activities, namely, contractor liaison and subsystem 
program management, will each require a manpower of 6 man-months. 

The manpower aggregate equation for the system integration and 
test phase can be described as the sum of the task aggregate equation for 
each activity performed during the phase: 


MP 5 " 18 man ~months +0.2 N B/g N g + (1 + K m ) (1 + K ) (1 + K ) 

P r 

x (0 * 1 n si/b n b/s + °* 3 n so/b n b/s ) 


where - system integration and test manpower. 
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5. COST /PERFORMANCE SIMULATION 


A. INTRODUCTION 

This section describes the Cost/Performance Simulation used to 
perform sample attitude control system (ACS) cost/performance calculations 
on a Tug-type vehicle as a practical example of implementing the methods 
developed by this study. As the simulation consists of extensive interaction 
among aggregate equations and the addition of certain auxiliary equations, the 
simulation is described to place sample calculations in proper perspective 
and to provide insight into various ways of tailoring the simulation program 
to individual study requirements. It is also intended to show a general imple- 
mentation approach for vehicle subsystems other than the ACS and to provide 
a core for the construction of an overall vehicular simulation. 

B. SIMULATION DESCRIPTION 

The simulation implementing the Cost/Performance Model is 
formulated to be adaptable; i. e. , it may be upgraded as a project progresses 
from the conceptual phase through design and development stages. Thus, as 
increasingly definitive ACS configuration and data base material become avail- 
able during the design process, individual Cost/Performance Model data base 
inputs and aggregate equations may be changed to reflect the normal progres- 
sion of various design and development tasks. It is also anticipated that the 
basic interactions and interfaces among major simulation modules will re- 
quire only a minor amount of change, thereby maintaining the utility of the 
simulation as a viable, short- reaction -time tool to support management 
decisions. 

With this approach in mind, initial aggregate equations used in 
performance, cost, safety, and schedule portions of the simulation may be 
general and may reflect implementation of a single baseline ACS. In this 
case, all possible combinations of candidate components within the four major 
ACS modules are automatically tested against ACS design criteria, and results 
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are presented according to operator-selectable sort criteria. In this early 
or conceptual phase application of the Cost/Performance Simulation, data 
bases may well be relatively incomplete or inaccurate; therefore, sensitivity 
studies of the baseline system are much more useful than absolute perfor- 
mance, cost, safety, and schedule figures. However, as work progresses 
and specific ACS designs emerge with increasing definition of their support- 
ing data bases, absolute ACS assessments will become more meaningful. 

1. initialization 

Figure 5-1 is an overview of the ACS Cost/Performance Simulation. 
As shown in the chart, entry of model variables and matrices initializes the 
program. A complex data base results from the many inputs required to 
define various ACS configurations. Therefore, the program is structured to 
allow entry of a stored data base, followed by easy program data base modi- 
fications or additions. 

Following the first initialization phase (consisting of data base entry 
anu moumcauon), data are provided for the various performance, safety 
(reliability), cost, and schedule criteria to be used in the program during 
execution. For example, performance criteria such as the required coast 
flight attitude control accuracy in roll, pitch, and yaw axes are the inputs 
during this second phase of the program initialization procedure. These 
inputs are used to evaluate acceptability of specific ACS configurations during 
execution of aggregate equations in the performance module of the program. 

A similar input specifies a required ACS mission reliability and sets a 
criterion for acceptance of each candidate ACS configuration during program 
execution of safety aggregate equations. Final inputs prior to program 
execution provide sort criteria to format program outputs by ranking accept- 
able ACS configurations according to cost, reliability, accuracy, or any 
other criterion calculable, using aggregate equations implemented in the 
simulation. 
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Figure 5-1. Cost/Performance Simulation Overview 
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Upon completion of the ACS requirements phase of initialization, the 
program begins execution of performance aggregate equations and decisions 
described in Section 5. B. 2. 

2. PERFORMANCE MODULE 

In the performance module of the Cost/Performance Simulation, the 
acceptability of each candidate ACS is evaluated by comparing calculated ACS 
performance, as determined by performance aggregate equations, to required 
ACS performance parameters entered during program initialization. The flow 
of calculations in this module may be relatively simple, such as those shown 
m Figure 5-1, or they may be more complex and essentially represent a basic 
error analysis of a particular ACS configuration. In general, use of the simu- 
lation during early conceptual phases of a program would rest on several base- 
line ACSs, with each specific baseline defined by a separate set of aggregate" 
equations. Later applications would be based on a single ACS configuration, 
requiring a single set of performance aggregate equations. As mentioned 
previously, the program is structured to accept these intermodule changes 
without disrupting the basic intramodule interactions that form the basis of 
the Cost/Performance Simulation. 

The program, as it presently exists, implements an early version 
of the performance aggregate equations, which vary in some details from 
those in Section 4. For example, major aggregate equations, such as the 
coast flight ACS accuracy equation, are implemented, while total ACS weight, 
volume, and power are obtained by simply summing component contributions 
without using a factor to account for cables, lines, or other ancillary equip- 
ment. Vibration, temperature, pressure, and schedule relationships are not 
included at this stage. 

Regardless of the level of sophistication of the performance aggre- 
gate equations, all ACS configurations passing the performance criteria are 
stored in the answer matrix. This matrix maintains a dynamic record of 
ACS configurations that have met or surpassed criteria entered by the opera- 
tor during program initialization. 
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The answer matrix is structured so that each column represents a 
particular ACS configuration and each row represents a total system attribute. 
Examples of answer matrix attributes are total ACS system weight or an 
identifier of a particular data base component that is a part of a specific ACS 
configuration. Thus, the first row of all answer matrix columns could 
identify a particular inertial measurement unit (IMU); the second row, a 
horizon sensor; the third, a star reference; the fourth, the system weight; 
and so on. While some row entries may be the same for different columns, 
each column will represent a distinct combination of row entries and hence 
a unique ACS configuration. 

Calculation of total system attributes peculiar to each ACS configura- 
tion is accomplished by using answer matrix pointers that refer to attributes 
of each component stored in the data base matrix. (The data base matrix is 
similar in structure to the answer matrix, except that columns list individual 
component attributes in each row, rather than system attributes.) For example, 
the total weight of a specific ACS configuration stored in the first column of 
the answer matrix is presently calculated by summing the weight of each ACS 
component stored in the data base, matrix that is listed in the first column of 
the answer matrix. Other calculations, such as the one for total system 
cost, use individual component attributes as inputs to one or more aggregate 
equations, which then calculate the total system attribute. 

This multilevel matrix approach to identification of system and 
component attributes is illustrated in Figure 5-2. It is typical of discrete 
event simulation languages and particularly efficient in limiting the size of 
matrices by minimizing storage of redundant information in the computer. 

Following assessment of performance, each ACS configuration 
meeting requirements and stored as an answer matrix entry is subjected to 
evaluation using a set of safety aggregate equations as detailed in Section 5. B. 3. 

3. SAFETY MODULE 

The safety aggregate equation module immediately follows implemen- 
tation of the performance module in the sequence of operations performed 
during execution of the Cost/Performance Simulation. All ACS configurations 
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Figure 5-2. Data Base /Answer Matrix Configuration 




that have successfully passed performance criteria and have been stored in 
the answer matrix are screened by the safety module as indicated in Figure 5-3. 

As shown in the figure, three distinct ACS mechanizations are 
assessed by the safety aggregate equations: 

a. Single-string ACS 

b. Active /standby string ACS 

c. Triply redundant ACS with voting 

All ACS configurations stored in the answer matrix are first evaluated for 
their reliability in a single- string mechanization. Those systems not meeting 
reliability criteria are upgraded by paralleling the lowest reliability module 
in the ACS sensor, processor, actuator, energy source module string. The 
total reliability of the improved system is then recalculated and checked for 
compliance with reliability specifications. If the system is still unacceptable, 
paralleling of the weakest module continues. (The weakest module may or 
may not be the same module paralleled previously. ) This process is continued 
until the system is acceptable or until a module exceeds triple redundancy, at 
which point the program rejects the configuration as unacceptable in a single- 
string mechanization and proceeds to evaluate the next configuration. Should 
the system meet reliability criteria, failure detection probability and false 
alarm probability are calculated for the configuration and the system is stored 
in the answer matrix as an acceptable single-string mechanization. 

After evaluating all configurations stored in the answer matrix for 
compliance with reliability criteria when mechanized as a single- string ACS, 
the program proceeds to evaluate each configuration in an active /standby ACS 
mechanization. As before, paralleling of modules is allowed to upgrade 
reliability of the active /standby mechanizations, and individual modules are 
held to maximums of triple redundancy. Systems meeting reliability criteria 
have failure detection and false alarm probabilities calculated and are then 
stored in the answer matrix as an acceptable active/ standby mechanization. 

Following evaluation of all answer matrix entries as active/ standby 
mechanizations, the program evaluates each entry in the answer matrix 
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Figure 5-3. Flow Chart Overview of Safety Aggregate Equation Calculations 




mechanized as triply redundant ACS strings with voting. In this mechaniza- 
tion, upgrading of individual modules by paralleling is not allowed, as the 
total ACS already consists of triply redundant systems. Other calculations 
proceed in a manner similar to previously described mechanizations. 

Detailed flow charts of the procedures described above and shown as 
major program, blocks in Figure 5-3 are given in Figures 5-4 through 5-7. 

Configurations not meeting reliability criteria after safety module 
processing are deleted from the answer matrix, and the program processes 
schedule and cost aggregate equations described in Section 5. B. 4. 

4. SCHEDULE AND COST MODULE 

Schedule and cost calculations are straightforward implementations 
of the schedule/cost aggregate equations; however, the present program does 
not implement schedule equations. Present plans include presenting schedule 
results as charts showing major program milestones for each configura- 
tion stored in the answer matrix. Each chart would be keyed to the printout 
of other information for the particular configuration it represents; the total 
package would represent complete assessment results of all ACS configura- 
tions meeting performance and safety criteria. For ease in evaluating various 
ACS configurations, printouts are ordered according to sort criteria previously 
entered by the operator. 
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Figure 5-4. Failure Rates, Active System 
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Figure 5-5. Single -String ACS 
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Figure 5-7. Triply Active ACS With Voting 







6. ACS COMPONENT DATA BASE 


One objective of this task was to develop a component data base 
format for use with the aggregate equations for the ACS, but also sufficiently 
general for use with the aggregate equations for other space vehicle systems. 
After data format inputs were obtained from both cost and performance 
specialists, the Table 1-1 data format was formulated, and some ACS com- 
ponent data were gathered. A partial list of this data is presented in Tables 
6-1 through 6-13. The component data used in the cost/performance com- 
puter study are shown in Appendix C. 
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Table 6- 1 . Attitude Control System Cor 


PERFORMANCE 


Boeing Part No. 
223-10036-2 
(S-3 Program) 


1. 1.0 

Technical 
Cha racteristics 

Magnetic Residual 
Moment = 150 pole-c 
Linearity ±1% 

Magnet Moment 
1 50 , 000 pole-cm 

1.2.0 

Power 

4. 9 w 

1. 3. 0 

Weight 

2. 3 kg 
(5 lb) 

1.4.0 

Volume 

0. 00052 m 3 
(32 in. 3 ) 

1.5.0 

Vibration 

Specification 

Random: 19. 7 g rms 
overall 

1.6.0 

Temperature 
Specification 
(radiation and 
conduction) 

0°C to +60° C 

1.7.0 

Ambient 

Pressure 

Specification 

0. 00133 N/m 2 
(10- 5 Torr) 


Data (Electromagnets) 


Electromagnets 


MSFC Estimate LMSC Estimate 
for LST Mission for LST 


M = 4.5 X 10 
pole -cm 


10W max 


28. 1 kg 
(62 lb) 


0. 00188 m 3 
(115 in. 3) 


NA a 


M = 0. 6 X 10 
pole- cm 


10 W 


5. 0 kg 
(11 lb) 


0.00074 m 3 
(45 in. 3) 


NA a 


6 


NA 


NA 


a 


NA 


NA 


a 


a 
















Table 6-1. Attitude Control System 
(Continued) 


Boeing Part No. 

2.0.0 SAFETY AND HAZARDS 223-10036-2 

(S-3 Program) 

2.1.0 Failure Rate 6. 9 X 1 0 ^ /hr 

2.1.1 Number of 
Single Point 
Failures 

NA a 

2.1.2 Number of 
Double Point 
Failures 

2.2.0 Failure Detection n 

Probability 

2.3.0 False Alarm 
Probability 

2.4.0 Destructive Poten- 
tial (TNT 0 

equivalence) 


Component Data (Electromagnets) 


Electromagnets 

MSFC Estimate LMSC Estimate 
for LST Mission for L.ST 


1. 1 X 10" 6 /hr 

NA a 

NA a 

NA a 

0 

0 

0 

0 


0 


0 
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Table 6-2. Attitude Control System Component Data {Rate Gyro Assembly) 




Rate Gyro Assembly (backup) 

1.0.0 PERFORMANCE 

LMSC RGA 
CCA 2794 
(P50 Program) 

Timex RGP 
402035-0 
(STP 72-2) 

1 . 1.0 

Technical 

Characteristics 

Threshold 0. 0009 rad/sec 
Rate Range ± 0. 1047 rad/sec 
3 -Axis uses 3 Mod CD 040 
Timex Rate Gyros 

Threshold 0. 00003 rad/sec 
Rate Range ± 0. 349 rad/sec 
3-Axis uses 3 IG10 Timex 
Rate Gyros 

1.2.0 

Power 

Running 20 W max . 
Starting 30 W max 

Running 20 W max 
Starting 25 W max 

1.3.0 

W eight 

1.4 kg 
(3 lb) 

1.4 kg 
(3 lb) 

1.4.0 

Volume 

0. 0006 1 | 
(37 in. 3 ) 

0. 00100 m^ 
(61 in. 3 ) 

1. 5.0 

Vibration 

Specification 

Random: Survival 

13. 9 g rms | 

Random: Survival 

18. 5 g rms 

1. 6.0 

Temperature 
Specification 
(radiation and 
conduction) 

NA a 

-12°C to + 49° C 
for Qual 

1.7.0 

Ambient Pressure 
Specification 

0.00133 N/m 2 
( 10-5 Torr) 

0.0133 N/m 2 
(IQ- 4 Torr) 


3 . 

NA = not available 










Table 6-2. Attitude Control S’ 
(Continued) 


2.0.0 SAFETY AND HAZARDS 



2. 1.0 

Failure Rate 


2. 1. 1 

Number of Single 
Point Failures 


2. 1. 2 

Number of Double 
Point Failures 

2, 2.0 

Failure Detection 
Probability 

2.3.0 

False 

Alarm Probability 

2.4.0 

Destructive Potential 
(TNT equivalence) 


= not available 


stem Component Data (Rate Gyro Assembly) 


Rate Gyro Assembly (backup) 


LMSC RGA 
CCA 2794 
(F50 Program) 


Timex RGP 
402035-0 
(STP 72-2) 


4. 6 X 10 ^/hr 








Table 6-3. Attitude Control System Component Data (Digital Computers) 




Digital Computers 

1.0.0 PERFORMANCE 

i RCA "MARC" 

5D Model 
Microcomputer 

Honeywell 
HDC 301 

Autonetics 

D216 

1.1.0 

Technical 

Characteristics 

Speed: Addition 
= 4.7 psec 
Mult = 49 /p sec 
CPU + 8K. R/W 
Memory + I/O 
Electronics 

Speed: Addition 
- 5.0 (isec 
Mult = 21.0 (xsec 
CPU + 8K R/W 
Memory + 1/0 
Electronics 

Speed: Addition 
= 2.5 |j,sec 
Mult - 13. 75 psec 
CPU + 8K R/W 
Memory + I/O 
Electronics 

1. 2.0 

Power 

4. 2 W 

— 

5 to 20 W 

32 W 

1.3.0 

Weight 

3. 1 kg 
(6. 9 lb) 

1. 4 to 3.2 kg 
(3 to 7 lb) 

2.7 kg 
(6. 0 lb) 

1.4.0 

Volume 

0. 00521 m 3 
(318 in. 3) 

0. 00241 m 3 
(147 in. 3) 

1 0. 00410 m 3 
(250 in. -3) (Does 
not include 
power conver- 
sion electronics) 

1. 5. 0 

Vibration 

Specification 

NA a 

NA a 

NA a 

1. 6.0 

Temperature 
Specification 
(radiation and 
conduction) 

NA a 

NA a 

NA a 

1.7.0 

-r * 

Ambient Pressure 
Specification 

NA a 

NA a 

NA a 


3 , 

NA = not available 



Table 6-3. Attitude Control System Component Data (Digital Computers) 
(Continued) 



Digital Computers 

2.0.0 SAFETY AND HAZARDS 

RCA "MARC" 
5D Model 
Microcomputer 

Honeywell 
HDC 301 

Autonetics 

D216 

2.1.0 Failure Rate 

5.7 X 10" 6 /hr 

63, 5 X i0" 6 /hr 

191 X 10“ 6 /hr 

2.1.1 Number of Single 
Point Failures 




2. 1. 2 Number of 

Double Point 
Failures 

NA a 

NA a 

NA a 

2.2.0 Failure Detection 
Probability 

0 

0 

0 

2. 3. 0 False Alarm 
Probability 

0 

0 

0 

2.4.0 Destructive Potential 
(TNT equivalence) 

0 

0 

0 

a NA = not available \ 












Table 6-4. Attitude Control System Component Data (Reaction Wheels) 


Reaction Wheels 

1.0.0 PERFORMANCE 

Sperry Model 
35 RWA 

Sperry Model 
45Q RWA 

Bendix OAO 
Type 1880272 

1.1.0 Technical 

Characteristics 

Speed 2400 to 
4100 rpm 
407<H<678 
N-m-sec 

Speed 5200 rpm 
13. 6<H<122 
N-m-sec 

Speed 1200 rpm 
1 H = 2.8 N-m-sec 
; at 900 rpm 

1.2.0 Power 

10 W at 3600 rpm 
88 W max during 
run-up 

10 W at 5200 rpm 

3.3 W at stall 

1.3.0 Weight 

31. 0 kg 
(68. 5 lb) 

9. 1 kg 
(20 lb) 

4. 5 kg 
(10 lb) 

1.4.0 Volume 

0. 0781 m 3 

(4770 in. 3 ) j 

j 

0.0290 m~ 
(1770 in. ) 

0.006 m 3 
(366 in. 3 ) 

1.5.0 Vibration 

Specification 

Random: 19. 5 grms 

NA a 

NA a 

1.6.0 Temperature 
Specification 
(radiation and 
conduction) 

-40° C to + 77 "C 

NA a 

L. . 

NA a 

1.7.0 Ambient Pressure 
Specification 

NA a 

NA a 

NA a 


not available 
























Table 6-4. Attitude Control System Component Data (Reaction Wheels) 
(Continued) 


2.0.0 SAFETY AND HAZARDS 


Reaction Wheels 


Sperry Model 
35 RWA 


Sperry Model 
45Q RWA 


Bendix OAO 
Type 1880272 


2.1.0 Failure Rate 


0. 55 X 10 _6 /hr 


Life 4 yr 


NA C 


2. 1. 1 Number of 
Single Point 
Failures 

2. 1.2 Number of 

Double Point 
Failures 


2.2.0 Failure Detection 
Probability 


2.3.0 False Alarm 
Probability 


NA e 


'NA C 


NA 


2.4.0 Destructive Potential 
(TNT equivalence) 


0 















OT- 


Table 6-5. Attitude Control System Component Data (Control Moment Gyros) 




Control Moment Gyros 

1.0.0 

PERFORMANCE 

Northrop 

CMG-II 

Bendix CMG + 
Electronics Assy 
for HEAO 

Sperry Model 
7 5 CMG 

1.1.0 

Technical 

Characteristics 

Bias <4.86X 10"^ rad/sec 
Unbal: <9.72 XI 0~^ ( ra d/sec)/g 
Single gimbai floated 
H - 8.95 N-m~sec 

Wheel: speed control 

±1% 

Gimbai: drift - 

1.75X 10 - 4 rad/sec 
Single gimbai 
H - 610 N -m - sec 

Double gimbai 
H = 102 N-m-sec 

1.2.0 

Power 

Wheel 9 W (no heaters) 

Gimbai: 40 W max 
Wheel: 200 W max 

during run-up 16 W 
max on orbit 

Power: 45 W peak 

1.3.0 

Weight 

10. 4 kg (23 lb) 

81. 6 kg (180 lb) 
including mounting 
ring 

15. 9 kg (35 lb) 

1.4. 0 

Volume 

0. 00463 m 3 (283 in. 3 ) 

0.292 (17,800 in. 3 ) 

0.062 m 3 (3800 in. 3 ) 
estimated 

1. 5. 0 

Vibration 

Specification 

Sine: 0. 3 to 10 g for 

5 to 3,000 Hz 
Rand : 7. 7 g rms 

Sine: 1.0 g peak 

10 to 5 0 Hz- 
9 min/axis 

NA a 

1.6. 0 

Temperature 
Specification 
(radiation and 
conduction ) 

-18°C to + SS’C 

NA a 

NA a 

1.7.0 

Ambient Pressure 
Specification 

0 to 207 X 10 3 N/m 2 
(0 to 30 psia) 

NA a 

NA a 


a NA = not available 




Table 6-5. Attitude Control System Component Data (Control Moment Gyros) 
(Continued) 




Control Moment Gyros 

2. 0. 0 

SAFETY AND HAZARDS 

Northrop 

CMG-II 

Bendix CMG + 
Electronics Assy 
for HE AO 

Sperry Model 
75 CMG 

2.1.0 

Failure Rate 

Life 

20, 000 hrs 

1. 1 X 10' 6 /hr 

NA a 

2.1.1 Number of Single 
Point Failures 

2.1.2 Number of Double 
Point Failures 

NA a 

NA a 

NA a 

2.2.0 

Failure Detection Probability 

0 

0 

0 

2.3. 0 

False Alarm Probability 

0 

0 

0 

2.4.0 

Destructive Potential 
(TNT equivalence) 

0 

0 

0 


a 

NA = not available 




Table 6-6. Attitude Control System Component Data (Sun Sensors) 



- 

Sun Sensors (heads only) 

1 . 0.0 

PERFORMANCE 

Bendix Fine Angle 
Sensor No. 1818823 

Adcole Aspect 
Sensor No. 1401 

Adcole Aspect 
Sensor No. 1301 

1 . 1.0 

Technical Characteristics 

Accuracy: 24 x 
10-6 rad (3<r 
assumed) 

Null seeker type 
2-axis total 
FOV ±10 deg 

Accuracy: 4. 4 X 
10-3 rad (3(r) 
Digital 8- bit 
outputs 

FOV 128" X 128" 

Accuracy: 4.4 X 
10-3 r ad (3cr) 
Digital 7 -bit 
output 

Modulation - 
spin of 
spacecraft 

1.2.0 

Power 

None required 

None required 

None required 

1.3.0 

Weight 

0. 85 kg (1. 88 lb) 

0. 10kg (0.22 lb) | 

0.044kg (0.095 lb) 

1.4.0 

Volume 

54 X 10-6 m 3 
(33 in. 3 ) 

5.2 X 10- 5 m 3 
(3.2 in . 3 ) 

2 . 2 X lO- 5 m 3 
(1.33 in. 3 ) 

1.5.0 

Vibration Specification 

NA a 

NA a 

NA a 

1.6.0 

Temperature 
Specification 
(radiation and 
conduction) 

-55° C to + 50°C 

NA a 

NA a 

1.7.0 

Ambient Pressure 
Specification 

NA a 

NA a 

NA a 


a NA = not available 


Table 6-6. Attitude Control System Component Data (Sun Sensors) 
(Continued) 




Sun Sensors 

2.0.0 

SAFETY AND HAZARDS 

Bendix Fine Angle 
Sensor No. 1818823 

Adcole Aspect 
Sensor No. 1401 

Adcole Aspect 
Sensor No. 1301 

2.1.0 

Failure Rate 

NA a 

NA a . 

NA a 

2.1.1 Number of Single 
Point Failures 

2.1.2 Number of Double 
Point F ailures 

NA a 

NA a 

NA a 

2.2.0 

Failure Detection 
Probability 

0 

0 

0 

2.3.0 

False Alarm Probability 

0 

0 

0 

2.4.0 

Destructive Potential 
(TNT equivalence) 

0 

0 

0 


cl 

NA = not available 
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Table 6-7. Attitude Control System Component Data (Magnetometers) 


1.0.0 PERFORMANCE 

Magnetometers (sensor and electronics) 

Schonstedt 
SAM-63C-1 
(S-3 Program) 

Dalmo Victor 
Part 76974 
(OAO Program) 

1.1.0 Technical Characteristics 

Accuracy ±0.044 rad 
(3cr) 

Linearity ±0.1% 
of null 

3-axis flux gate 

Linearity ±3% 
3-axis flux gate 

1.2.0 Power 

1 . 1 W max 

NA a 

1.3.0 Weight 

0. 91 kg (2. 0 lb) 

14. 1 kg (9 lb) 

1.4.0 V olume 

0.0028 m 3 (169 in. 3 ) 

0.00458m 3 (27 5 in 3 ) 

1.5.0 Vibration Specification 

Random: 19. 7 g rms ! 

daring boost 

NA a 

1.6.0 Temperature Specification 
(radiation and conduction) 

Sensor: -20°Cto 

i + 53° C 

(Electronics: -5.5°C 
1 to + 45 °C 

NA a 

1.7.0 Ambient Pressure 
Specification 

1. 333 X 10“ 3 N/m 2 
(IQ" 5 Torr) 

NA a 


NA = not available 
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Table 6-7. Attitude Control System Component Data (Magnetometers) 
(Continued) 



Magnetometers 

2.0.0 SAFETY AND HAZARDS 

Schonstedt 
SAM- 63 C- 1 
(S-3 Program) 

Dalmo Victor 
Part 76974 
(OAO Program) 

2,1.0 Failure Rate 

1. 4 x 10 _6 /hr 

NA a 

2.1.1 Number of Single 
Point Failures 

2.1.2 Number of Double 
Point Failures 

NA a 

NA a 

2.2.0 Failure Detection 
Probability 

0 

0 

2.3.0 False Alarm Probability 

0 

0 

2.4.0 Destructive Potential 
(TNT equivalence) 

0 

1 

0 


3 . 

NA = not available 
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Table 6-8. Attitude Control System Component Data (Inertial Reference Assembly) 



Inertial Reference Assembly 

1.0.0 PERFORMANCE 

LMSC’s ARA 
CCA No. 3006 

1.1.0 Technical Characteristics 

Non-accel sensitive drift = 1 .7 X 10*^ 
rad/ sec for 2 mo 
3 -axis 3 SDF 2564 gyros with 
necessary electronics for rate and 
attitude sensing 

1.2.0 Power 

25 W max at 46° C 

50 W max at 4 6 C 

135 W max during warmup 

1.3.0 Weight 

10 kg (22 lb) 

1.4.0 Volume 

0.009 m3 (545 in .3) 

1*5*0 Vibration Specification 

Random: performance 7. 68 g rms 
Survival 18. 5 g rms 

i — - 

1.6.0 Temperature Specification 
(radiation and conduction) 

Baseplate 

4 e C to 49° C 

1.7.0 Ambient Pressure 
Specification 

1.333 X 10' 6 N/m2 
(10- 8 Torr) 

— 
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Table 6-8. Attitude Control System Component Data (Inertial Reference Assembly) 
(Continued) 


2.0.0 SAFETY AND HAZARDS 



Inertial Reference Assembly 

LMSC'sARA 
CCA No. 3006 

2.1.0 Failure Rate 

40 X 10“ 6 /hr 

2.1.1 Number of Single Point Failures 

2.1.2 Number of Double Point Failures 

NA a 

2.2.0 Failure Detection Probability 

0 

2.3.0 False Alarm Probability 

0 

2.4.0 Destructive Potential (TNT equivalence) 

0 


cL 

NA = not available 
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Table 6-9, Attitude Control System Component Data 
(Fixed Head Star Trackers) 




Fixed Head Star Trackers (head 4- electronics) 

1.0.0 P ERFORM ANC E 

r 

OAO Boresighted 
Star Tracker 
ITT 

ITT OAO Electro- 
Optical Sensing 
Head 

TRW Solid State 
Star Field Scanner 
Pioneer F/G 

1 . 1.0 

Technical 

Characteristics 

Accuracy: 22. 6 X 
1 0"° rad (3cr) 

M = +4 

Electronics scanning 

i° x r fov 

2 -axis analog outputs 

Accuracy: 131 X 

lO" 6 rad (3cr) 

M = +2. 5 

Electronic scanning 
1° X 1° FOV 
2 -axis analog outputs 

Accuracy: 

0. 009 rad (3<r) 
Canopus 
FOV 0. 5° X 40° 

1.2. 0 

Power 

7. 7 W 

4. 5 W 

0.5 W 

1.3.0 

Weight 

10. 4 kg (23 lb) 

2.7 kg (6 lb) 

1. 1 kg (2. 5 lb) 

1.4.0 

Volume 

0.013m 3 (795 in. 3 ) 

0. 0025 m 3 (155 in. 3 ) 

0. 0027 m 3 
(166 in. 3 ) + 
sunshade 

1.5. 0 

Vibration 

Specification 

NA a 

NA a 

NA a 

1.6.0 

Temperature 
Specification 
(radiation and 
conduction) 

NA a 

NA a 

NA a 

1.7.0 

Ambient 

Pressure 

Specification 

NA a 

NA a 

NA a 


a 

NA = not available 
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Table 6-9. Attitude Control System Component Data 
(Fixed Head Star Trackers) (Continued) 



Fixed Head Star Trackers 
(head + electronics) 

2. 0. 0 SAFETY AND HAZARDS 

OAO Boresighted 
Star Tracker 
ITT 

ITT-OAO Electro- 
OpticaT Sensing 
Head 

TRW Solid State 
Star Field 

Sensor Pioneer F/G 

2.1.0 Failure Rate 

NA a 

NA a 

0. 76 x l0 _6 /hr 

2. 1, 1 Number of Single 
Point Failures 

2. 1.2 Number of Double 
Point Failures 

NA a 

NA a 

NA a 

2.2.0 Failure Detection 
Probability 

0 

0 

0 

2.3.0 False Alarm 
Probability 

0 

0 

0 

2.4.0 Destructive Potential 
(TNT equivalence) 

0 

0 

0 


£1 

NA = not available 
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Table 6-10. Attitude Control System Component Data 
(Earth Sensor Assemblies) 



Earth Sensor Assemblies (including electronics) 

1.0.0 PERFORMANCE 

TRW 

FLTSATCOM 

Barnes 
Model 13-210 

Barnes 

Model 13-181X 

1.1.0 Technical 

Characteristics 

Accuracy 
0. 87 X 

10‘ 3 rad (3cr) 
2-axis sweep 
through 

Accuracy 
1 . 75 X 

10" 3 rad (3<r) 

Horizon crossing 
indicator (spinning) 1-axis 

Accuracy 
0. 026 to 
0. 035 rad (3<r) 
Radiation 
balance 
1-axis 

1.2.0 Power 

5 W (av) 

1.35 W (av) 

0.5 W (av) 

1.3.0 Weight 

2. 7 kg (5. 9 lb) 

0. 91 kg (2. 0 lb) 

1. 4 kg (3. 0 lb) 

1.4.0 Volume 

0. 005 m 3 
(3 22 in. 3 ) 

0. 0018 m 3 
(110 in. 3 ) 

0. 0017 m 3 
(104 in. 3 ) 

1.5.0 Vibration 

Specification 

NA a 

1 25 g rms random 
(survival) 

NA a 

1.6.0 Temperature 
Specification 
(radiation and 
conduction) 

- 18° C to + 54° C 
(design goal) 

-2 0° C to + 60° C 

-20* C to + 60° C 

1.7.0 Ambient 
Pressure 
Specification 

NA a 

6. 7 X 10' 3 N/m 2 
(5 X 10- 5 Torr) 

1. 333 X 10 -3 N/m 2 
(10 -5 Torr) 


cl 

NA = not available 
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Table 6-10. Attitude Control System Component Data 
(Earth Sensor Assemblies) (Continued) 



Earth Sensor Assemblies (including electronics) | 

. 0. 0 SAFETY AND HAZARDS 

TRW 

FL.TSATCOM 

Barnes 

Model 

13-210 

Barnes 

Model 

13-181X 

2.1.0 Failure Rate 

10. 1 X 10" 6 /hr 

1. 1 X 10~ 6 /hr 

3. 5 X 10 ^/hr 

2. 1. 1 Number of Single Point Failures 
2. 1. 2 Number of Double Point Failures 

NA a 

NA a 

i 

NA a 

2.2.0 Failure Detection Probability 

0 

0 

0 

2. 3. 0 False Alarm Probability 

0 

0 

0 

2.4.0 Destructive Potential 
(TNT equivalence) 

0 

0 

0 


a 

NA = not available 





Table 6-11. Attitude Control System Component Data 
(Interface Electronics) 



Interface Electronics 

1.0.0 PERFORMANCE 

MSFC Estimate for LST Mission 

1.1.0 Technical 

Characteristics 

Switches various sensors and actuators on line 
as required. Provides fault detection and 
isolation. Provides command implementation. 
Provides backup circuitry. 

1.2.0 Power 

_J 

3 W (av) 

1.3.0 Weight 

4. 5 kg (10. 0 lb) 

1.4.0 Volume 

0. 0084 m 3 (514 in. 3 ) 

1.5.0 Vibration 

Specification 

NA a 

1.6.0 Temperature 
Specification 
(radiation and 
conduction) 

NA a 

1.7.0 Ambient Pressure 
Specification 

NA a 


NA = not available 



Table 6-11. Attitude Control System Component Data 
(Interface Electronics) (Continued) 


2.0.0 SAFETY AND HAZARDS 

Interface Electronics 
MSFC Estimate for LST Mission 

2. 1,0 Failure Rate 

1. 0 x 10 -6 /hr 

2,1.1 Number of Single Point 
Failures 

2. 1. 2 Number of Double Point 
Failures 

NA a 

2.2.0 Failure Detection Probability 

0 

2.3.0 False Alarm Probability 

0 

2.4.0 Destructive Potential 
(TNT equivalence) 

0 

NA = not available 




Table 6-12. Attitude Control System Component Data 
(Reaction Control Subsystem Electronics) 



Reaction Control Subsystem Electronics 

1.0.0 PERFORMANC E 

MSFC Estimate for LST Mission 

1.1.0 Technical 

Characteristics 

Drives solenoids of reaction control jets* 

1.2.0 Power 

Average power is negligible. 

1.3.0 Weight 

2. 7 kg (6. 0 lb) 

1.4.0 Volume 

0.0054 m 3 (328 in. 3 ) 

1.5.0 Vibration 

Specification 

NA a 

1.6.0 Temperature 
Specification 
(radiation and 
conduction) 

NA a 

1.7.0 Ambient 
Pressure 
Specification 

NA a 


a NA = not available 
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Table 6-12. Attitude Control System Component Data 
(Reaction Control Subsystem Electronics) 
(Continued) 



Reaction Control Subsystem Electronics 

.0.0 SAFETY AND HAZARDS 

MSFC Estimate for LST Mission 

2. i. 0 Failure Rate 

0. 01 X 10~ 6 /hr 

2.1.1 Number of Single Point 
Failures 

2.1.2 Number of Double Point 
Failures 

NA a 

2,2.0 Failure Detection Probability 

0 

2,3.0 False Alarm Probability 

0 

2.4.0 Destructive Potential 
(TNT equivalence) 

0 


a NA = not available 



-26 


Table 6- 13. Attitude Control System Component Data 
(Reaction Control Jet Thrust Levels) 



Reaction Control Jet Thrust Levels 

0. 0 PERFORMANCE 

Agena Thrusters 9- 

1.1.0 Technical Characteristics 

Selectable at 2. 224 N (0. 5 lb) or 
44. 48 N (10.0 lb) by dual press, reg 

i . 2. 0 Type 

Monopropellant cold gas 

1.3.0 ISP 

590 N - sec/kg (60 lb, - sec/lb ) 
~ f rrr 

a 

Typical of thrusters suitable for 

spectrum of NASA Payload Missions 


cr- 



7. POWER CONDITIONING SUBSYSTEM 


A. INTRODUCTION 

A generalized guideline for the development of a power conditioning 
subsystem for the attitude control system (ACS) is presented in this section. 
A power conditioning subsystem is defined as the functional blocks that 
receive raw spacecraft power, and convert and condition it to a usable form. 
The subsystem does not include energy conversion devices such as batteries 
and solar arrays. Conversion and conditioning would involve DC /DC or 
DC /AC conversion and would include voltage regulation. The terms "power 
system" and "power supply" are used interchangeably with "power condition- 
ing subsystem." 

This guideline is general; it is intended as a system view of func- 
tional blocks to identify the basic concept. From this generalized system 
viewpoint, where the detailed circuit design is left to the circuit designer, 
it examines the following: 

1. Development of a generalized expression for overall 
efficiency as a function of power supply efficiency, 
coupling networks, and cabling resistances 

2. Effects of transfer losses on regulation 

3. Weight and volume estimation. 

B. POWER SYSTEM DESIGN GUIDELINES 

A representative power system, as shown in Figure 7-1, considered 
the following characteristics as a minimum: 


1. 

Voltage outputs 

2. 

Efficiency 

3. 

Average or peak power 

4. 

Weight 

5. 

V olume 

6. 

Regulation. 
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Figure 7-t. Power System 






For design optimization, design guidelines considered tradeoffs between 
such factors as desired efficiencies, power requirements, weight, and vol- 
ume. The first step in defining an approach for the ACS power supply sys- 
tem is to consider efficiency, and then to relate power requirements with 
weight and volume. This is in view of the overall system perspective where 
source, power conditioning, and load requirements are considered 
simultaneously. 

1. EFFICIENCY 

Power system efficiency depends on the following factors: 

a. Efficiency of power converter 

b. Efficiency of redundancy coupling networks 

c. Losses in cabling. 

Referring to Figure 7-1, the following terms are defined: 

V l’ ^2' ’ * ' V N = v °ltages at ACS 

= output voltages at power converter 
e j, e 2 , . . . e N = output voltages at diode summing point 
If, I^> • ♦ • = current outputs 

*01 > P Q 2 » * * • P ON = P owers at the ACS loads 

Pq = power output at diode summing point 
Pj = power input to power converters 
P s = power output of power converters 
rn l > m 2* * ' ' m N = ca ^le voltage drops 
R = cable resistance 
v^ = diode voltage drop 
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The overall system efficiency is given by 


\ = p o /p i 


where 


N 

P Q = X P Oi 
1=1 

The overall efficiency may be expressed as the product of the pre- 
viously mentioned factors 




where 


r|j = power converter efficiency 


•2 


— 1*^/1 n mrl O VI ATT J-V All T 1 T M TV <n A 4 t*tt> wl. a £■£! * ^ ^ 

- y 1-vupAixig XICtVYl/1 i\. c:i ii ^ I CIJi t, y 


^3 = efficiency of power transfer through cabling 


"1 = V P I 

n 2 = P Q /P S 


The efficiency of power transfer is 

efficiency = 1 - ( summation of series losses)/(input power) 
Writing in this form. 


^2 



< V d V 


rPc 
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Assuming v^j is constant for all diodes in the coupling network. 



But 


N 

= £ E. I. 
S 1 i 

i = l 


and 


N N 

E E i - Z < v i + ^ + m.) I. 

N N 

= U1 Poi + ill .' Vd + 11 


giving 


n 2 = 1 - v a 


/ N v 

r n 

N 1 

te 4 

E 

Li = l 

P Oi + .£ (v d + m i> I i| 


Similarly for 


^3 P 0 /P 0 


n 3 = 1 


(I ' 1 -[& K /R )] /P ° 
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Assuming the cable resistance is constant for all lines. 



2. REGULATION 

Since a typical system contains digital and/or analog circuits using 
the same power supply voltage, it becomes apparent that any current fluctu- 
ations on any line will produce voltage fluctuations that are coupled to all the 
circuits. These voltage fluctuations, which represent reduced regulation, 
are dependent upon the common line impedance through which the load cur- 
rents flow. Thus, 

Reg L = AV/V = RAI/V = pLAI/AV (7-1) 
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where Reg^ - regulation resulting from line impedance R for a load 
change AI. 

This would be added to the regulation of the power supply. Since 
certain networks may require tightly regulated voltages {sensors, for exam- 
ple), it would be wise to investigate the regulation on those lines, and ensure, 
by proper cable design, that line resistance does not degrade the regulation 
to a point that would be detrimental to the operation of those circuits. In 
addition, the changes in current drawn by a particular circuit not only pro- 
duce voltage fluctuations on the distribution line, but, because of the com- 
plex impedance of the power supply bus, also produce transient voltages. 

In systems that experience rapid changes in load current, the transients 
produced are much more significant than the simple resistive (IR) drop. A 
transient analysis would evaluate the effects of these voltage transients, and 
would be part of the detailed design effort when the hardware orientation is 
established. These analyses would, in effect, be part of the electromagnetic 
interference (EMI) considerations normally investigated during spacecraft 
system design. 

The overall regulation of the power system would depend on the 
design requirements of the loads. As implied above, however, since the 
overall regulation would include the regulation of the power supply itself 
(converter and regulator), as well as the effects of cabling resistances, the 
power supply regulation must be considered in light of the overall require- 
ments. In other words, 


or. 


Syst PS + Cb 

reg reg reg 


( 7 - 2 ) 


PS as Syst - Cb 
reg 1 reg reg 


( 7 - 3 ) 
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where 


PS - regulation of the power supply 
reg 

Systr e g = overall system regulation 

Cb = regulation due to cable resistance effects 
reg 

Cb reg is the regulation described by Eq. (7-1). 

Table 7-1, from Ref. 1, shows general performance of various 
types of regulators, and illustrates relative characteristics of ripple, noise, 
reliability, etc. 

3. WEIGHT AND VOLUME 


The rapidly increasing use of microelectronic circuits in the design 
of regulators and of DC /DC converters and inverters contributes to the reduc. 
tion of power supply weight and volume. The use of higher frequencies, pro- 
viding that resultant EMI characteristics are kept within acceptable limits, 
allows the use of smaller components (filters, transformers, etc.). Limita- 
tions also exist for the use of ICs, such as power -handling abilities, and the 
inability to microminiaturize power transistors and transformers. Other 
factors subject to compromise or tradeoff include 


a. AC or DC output 

b. Types of oscillators 

c. Oscillator frequency 

d. Heat sinking 

e. Regulation 

f. Efficiency. 

Generalized graphs resulting from studies of typical power supply 
parameter data can be used as a tool for estimating weight and volume versus 
load capabilities. These graphs represent typical supplies designed in the 
past and empirical data collected by various agencies. The curves, from 
Ref. 2, reflect the effects of load capabilities, regulation, and efficiency on 
the parameters mentioned above, and ultimately on weight and volume. 
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3 . 

Table 7-1. General Performance of Regulators 


Type 

Pulse 

Width 

Boost 

Phase 

Buck Boost 

Series 

Efficiency (%) 






V in: 20 

96 

93 

88 

90 

97 

V in: 32 

92 

96 

86 

89 

60 

Regulation {%) 

±1/2 

±1/2 

±1/2 

±1/2 

±0. 1 

Output Voltage 

20 max 

31 min 

Any 

Any 

19 max 

Common Grounds 

Yes 

Yes 

Isolation 

Isolation 

Yes 

Output Impedance 



Varies with 



(mfl) 

20 

20 

f to 50 

20 

1 

Ripple (mV) 

100 

150 

100 

150 

1 

Induced Noise 

High 

Low or 
high 

High 

Very High 

Min 

Audio Susceptibility 

200:1 

20:1 

200:1 

20:1 

100:1 

400:1 

Cost 

High 

High 

Medium^ 

Highest 

Lowest 

Outputs 

1 

1 

Many 

Many 

1 

Reliability 

1 Good 

Good 

Good 

Good 

Best 

Weight (kg) 

' 0. 91 

0. 91 

1. 1 

1. 1 

0. 45 C 

Output 

DC 

DC 

i 

AC or DC 

DC 

DC 


a 

Assume input voltages of 20 to 32 V. 

^Depends on frequency response, 
c 

Depends on heat sink. 









They are reproduced as Figures 7-2 through 7-8. Figure 7-9 shows typical 
effects of operating frequency on transformer weight. 

Table 7-2, also from Ref. 2, summarizes the data of Figures 7-2 
and 7-3 in two categories: medium power (150 W to 1 kW) and low power 
(less than 150 W). 

Figure 7-10, from Ref. 3, shows a curve relating weight per power 
to power output of a typical power conditioner. This curve covers power out- 
puts from about 3 to several thousand W; it was developed from analytical 
data, vendor data, and data from existing hardware by a study conducted in 
1971. This curve essentially agrees with Figure 7-3, but covers a wider 
power range. 

C. SUMMARY 

A discussion of the basic power conditioning system concept has 
been presented to familiarize the reader with three basic parameters (from 
an overall system viewpoint): 

1 . Efficiency 

2. Regulation 

3. Weight and volume estimation (versus power and efficiency 

requirements). 

An attempt was made to relate these parameters to external con- 
siderations, i.e. , cabling and coupling network losses. The basic converter/ 
regulator was presented as a functional block with a given efficiency, and the 
overall (converter/coupling/cabling) efficiency was given as a function of 
transfer losses (DC series losses). 
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POWER SUPPLY VOLUME 


m 

0.01148 

0.00984 

0.0082 

0.00656 

0.00492 

0.00328 

0.00164 

0 



0 100 200 300 400 500 600 700 8001 900 1000 


POWER SUPPLY OUTPUT POWER, W 


Figure 7-2. Power Supply Volume vs Power Supply Output Power 



POWER SUPPLY WEIGHT 


kg lb 



POWER: SUPPLY OUTPUT, W 


Figure 7-3. Power Supply Weight vs Power Supply Output Power 
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6.35 

5.44 


4.54 
S 3.63 

LU 

£ 

2. 72 

1.81 

0.91 

0 


Figure 7-4. 



WEIGHT 


54.4 - 120 

45 0 4 - 100 

36.3 - 80 

27.2 — 60 



EFFICIENCY, 
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Figure 7-7. Ed 




EFFICIENCY, 


0 too 200 300 400, 5001 600 700 8001 900 1000 
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Figure 7-8, Typical 3-Phase, 400-Hz Inverter Efficiency vs Output Pc 
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Figure 7-9. Transformer Weight (200-W Output, 97% Efficiency) 
vs Operating Frequency 
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Table 7-2. Power/Weight and Power/Volume Data Summarization 


Component 

Medium Power 
(150 W to 1 kW) 

Low Power 
(<150 W) 

W/kg 

(W/lb) 

W/rn 3 

(W/in. 3 ) 

W/kg 

(W/lb) 

W/m 3 

(W/in. 3 ) 

DC/DC Converter Regulators 

99.2 

1.2 X 10 5 

22 

4. 9 X 10 4 


(45) 

(2) 

(10) 

(0.8) 

1 -Phase, 400-Hz Inverters 

91.7 

7.6 X 10 4 

17 

6. 1 x 10 4 


(41.6) 

(1.25) 

(7.7) 

(1) 

3-Phase, 400-Hz Inverters 

68. 3 

3. 6 X 10 4 

12. 1 

1. 5 X 10 4 


(~3 1 ) 

(~0.6) 

(5.5) 

(0.25) 








POWER CONDITIONER WEIGHT 


kg/ W 

0.181 — 

0.091 - 

0.045 — 
0.036 — 
0.027 — 

0.018 — 
0.0091 — 


0.0045 I — 


0.00045 


Ib/V* 



Figure 7-10. Power Conditioner Weight Curve 
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8. THERMAL CONTROL SUBSYSTEM 

A. INTRODUCTION 

As part of'NASA Task 2. 3, a number of separate but related studies 
were undertaken to define system and component characteristics for use in 
synthesizing analytical models to derive system cost. As part of a general 
framework, this subtask provides the thermal considerations that influence 
the design, synthesis, and eventual cost of a spaceborne guidance, navigation, 
and control (GNC) subsystem. Specifically, this subtask identifies the ther- 
mal drivers, or parameters, that influence the design and operation of 
typical GNC components, and discusses the rationale for using various 
thermal margins. 

To define the key thermal drivers, one must understand the following 
concepts: 

1. Basic thermal control subsystem (TCS) design philosophy, 
which includes thermal design margins (e. g. , design tempera- 
ture margins and heater power margins) 

2. TCS design logic from the standpoint of the spacecraft con- 
tractor integrating the various payloads and vehicle subsys- 
tems, such as GNC; telemetry, tracking, and command 
(TTC); and power 

3. Logic or procedure for specifying temperature requirements 
from the subsystem level. 

B. DESIGN PHILOSOPHY 

The purpose of the spacecraft TCS is to provide a relatively benign 
environment for the proper functioning of the other subsystems. Failure of 
the TCS often produces synergistic results: a loss of the TCS may result in 
the failure of other subsystems. 

A study of failures /anomalies occurring on selected Air Force pro- 
grams (Ref. l)was conducted to identify common underlying causes and to deter- 
mine corrective actions. The failures /anomalies included such items as over- 
heating of components, thermal runaway of batteries, and inaccuracies in 
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temperature predictions due to improper analysis and simulation. The study 
showed that 11. 6% of the failures /anomalies were directly attributable to 
thermal design. It also showed that a significant number of failures/ 
anomalies were due to inadequate thermal design resulting from insufficient 
thermal margins in the TCS design. 

Two factors determine the thermal adequacy of a TCS: 

1- Magnitude of temperature margin 

2. Fidelity of thermal model used in temperature prediction. 

In a thermal analysis, thermal margins must be defined and specified in the 
design requirements of the system to account for uncertainties in the modeling 
of the system, errors in the solution methods, and uncertainties in the data 
used. Based on studies correlating analytical temperature predictions and 

flight data, the temperature accuracy of an analytical thermal model has been 
estimated as follows (Ref. 2): 


Standard 

Deviation 

(<r) 

Percent of 
Confidence 

— : — i 

i emperaturc Accuracy ( V C) 

Unverified 

Analytical 

Predictions 

Predictions 
Verified by 
Testing 

1 . 0 

68 

8 

5. 5 

1.4 

85 

12 

8 

2. 0 

95 

17 

11 

3. 0 



99 

25 

17 


Because of the shortcomings of analytical predictions, it is strongly 
recommended that all spacecraft equipment be designed and tested with a 
17 C margin, i. e. , all components shall perform satisfactorily 17°C above 
the maximum predicted temperature and 17°C below the minimum predicted 
temperature. Obviously, there are always exceptions, in which case a 
"sensitivity-analysis " or "statistical analysis (Monte Carlo)' 1 shall be per- 
formed. These analytical techniques allow the analyst to identify the key 
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parameters that affect a given temperature and therefore, can be used to 
quantify the magnitude of uncertainty in the analysis to enhance the confidence 
level in achieving the predicted values. 

In an active TCS, where electrical or mechanical devices (e.g., 
heaters and mechanical refrigerators) are utilized to effect temperature con- 
trol, the energy to drive these control devices should include a 25% margin. 
For example, if heaters are utilized to meet the lower temperature limit of a 
component in an extremely cold environment, the heater should be sized such 
that only 75% of its rated capacity is being used to maintain temperature con- 
trol. In the case of a refrigerator, only 75% of the cooling capacity should 
be required to effect temperature control in an extremely hot environment. 
The philosophy of the 25% capacity/capability margin should be utilized for 
all active control devices such as louvers, heat pipes, and fluid loops. 

C. DESIGN LOGIC 

This section examines the parameters required to define various 
TCS techniques that have been utilized to provide and maintain temperature 
control for all kinds of spacecraft; i. e. , from a simple passive control sys- 
tem (e.g. , Explorer), where only surface coatings and insulation are used to 
effect temperature control, to the more complex active control systems 
(e. g. , Sky lab), where multiple heat transport loops have been utilized to 
provide and maintain temperatures. Table 8-1 lists some of the TCS tech- 
niques used or considered in previous spacecraft design. The names and/or 
groupings of the various TCS techniques shown were coined in an attempt to 
categorize TCS into increasing levels of complexity (which would implicitly 
reflect increasing cost). However, affixing explicit cost correlations is 
beyond the scope of this subtask. 

Two approaches are used to design a subsystem or component TCS. 
The first approach defines the temperature range for optimum subsystem or 
component performance. This requirement and the requirements of other 
subsystems are then specified for the design of the overall spacecraft TCS. 
The second approach assumes an overall TCS with its implicit temperature 
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Table 8-1. Spacecraft TCS Techniques 


Passive TCS 

Coatings 

Insulation 

Modified Passive TCS 
Heaters 

Heat pipe (conductors) 

Phase change 
Semi-Active TCS 
Louvers 
Diode 

Isothermalizer heat pipe 
Active TCS 

Radiator loop 
Transport loop 
Others (special TCS) 

Cryogenic coolers 
Expendable coolants 

limits, and then designs the subsystem or component to operate within 
these limits. 

Figure 8-1 is a typical flow diagram of the logic used to select a 
TCS. The minimum input requirements for preliminary TCS design include 

1. Spacecraft configuration (e. g. , a spin- stabilized cylindrical 
spacecraft or a three- axis stabilized rectangular spacecraft) 

2. Orbital data (e. g. , sun- synchronous low earth orbit) 

3. Preliminary equipment temperature limits based on best 
available data 

4. Preliminary equipment duty cycle (i. e. , heat dissipation as 
a function of time). 

Inputs 1 and 2 are used to assess the environmental heat loads. Inputs 3 and 
4 are used to define a TCS technique to satisfy the equipment thermal 
requirements in extremely cold and hot environments. 
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INPUT 

• SPACECRAFT CONFIGURATION 

• ORBIT DATA 

• preliminary equipment 

TEMPERATURE LIMITS 

• PRELIMINARY EQUIPMENT 
POWER PROFILE 


I 


CALCULATE 

ORBIT HEAT RATES 
f (spococraft configuration, 
orbit dotal 


I 


ASSUME TCS 
PASSIVE 


CALCULATE 

• TCS WEIGHT 
PENALTY 

• TCS POWER 
PENALTY 



ESTABLISH 


• T, 


COMPARTMENT 
COATINGS^ RE0U1REMENTS 


ESTABLISH 

• HEATER POWER 

• HEAT PIPE REQUIREMENTS 

• ETC. 


ESTABLISH 

• LOUVER CHARACTERISTICS 

• HEAT PIPE CHARACTERISTICS 

• ETC. 


ESTABLISH 

• RADIATOR SIZE 

• TRANSPORT LOOP 
CHARACTERISTICS 

• ETC. 


ESTABLISH 

SPECIAL REQUIREMENTS 


Figure 8-1. 


Preliminary Spacecraft TCS Configuration 
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In configuring a preliminary TCS, one generally starts with the 
simple passive technique, and gradually increases the complexity of the sys- 
tem until every thermal requirement has been satisfied. As TCS complexity 
increases, more requirements must be defined and established. For exam- 
ple, if a passive TCS adequately meets the spacecraft thermal requirements, 
the output from Figure 8-1 would be a definition of insulation requirement, 
thermal costing requirement, and compartment temperatures. However, if 
a louver is required, the louver requirements must also be defined. 

Figure 8-2 shows the logic sometimes used in specifying the design 
temperature limits for various spacecraft subsystems and components. This 
approach is utilized to update and/or modify components. For example, in 
a spacecraft program, where modifications are implemented in block changes, 
an updated GNC system may be implemented with no change in the TCS. In 
this example, the updated CNC system must be designed to function in the 
existing spacecraft TCS environment. 

The logic in Figure 8-2 is more usefully applied to perform TCS 
tradeoff studies on the subsystem level prior to subsystem integration into 
the spacecraft. The drivers required to perform the subsystem TCS tradeoff 
studies are presented in Table 8-2. Two types of drivers are identified: 
spacecraft drivers (i. e. , spacecraft-peculiar parameters), and component 
drivers (i, e« , component-peculiar parameters). 

After identifying the general TCS drivers in Table 8-2, one can 
qualitatively specify the drivers for individual components utilized in a given 
subsystem. Table 8-3 lists the drivers necessary to characterize or specify 
the thermal requirement of specific components used in a GNC system. For 
example, the drivers that must be specified to define the thermal character- 
istic of a rate gyro assembly are duty cycle, thermal capacitance, and 
temperature limits. 
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DEFINE DESIGN TEMPERATURE' 
/ REQUIREMENTS (operating) 

/ T H = T CAL-MAX +17 

I T C = T CAL-MIN’ 17 
\ (non-operating) 

\ - 54° C <J < 71° C OR 

\f (mate ria I characteristics) 


DEFINE TEMPERATURE 
REQUIREMENTS (operating) 

T = Tq (old equipment) 

(non-operating \ 

-54°C<T<71 °C OR 
^\f (material characteristics) 


DEFINE NEW QUALIFICATION 
TEMPERATURE (operating) 

T C =T CAL-MIN -17 

T H = T CAL-MAX +1? 
(non-operating) 

-54°C<T<71°C OR 
f (material characteristics) 


Figure 8-2. Component Design Temperature Requirements 






Table 8-2. Drivers Required for Subsystem 
TCS Tradeoff Studies 


Spacecraft Drivers 
Location 

Defined by subsystem 
Integrator's choice 
Equipment Interaction 
Other subsystems 
Other components 


Component Drivers 

Power Profile (duty cycle) 

f(B) 

f(T) 

Constant 


r 'ni_ i s~* * . 

luciaiidi uapdcuance 
Weight 
Material 

General assembly 
Heat Transfer Mode 

Base conduction 
Radiation from housing 


dT /d 0 1 


max 


During operation 


During warmup/cool-down 
Temperatures 

Operating limits 
Non-operating limits 
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Table 8-3. GNC Component TCS Drivers* 


GNC Components 
Electromagnets 
Rate Gyro Assembly 
Computers 


Reaction Wheels X 

Control Moment Gyro 

Sun Sensors X 

Magnetometers X 

Sensor and Electronics 

Inertial Reference 

Assembly X 

Star Trackers X 

Head and Electronics 

Earth Sensor Assembly X 

Electronics 

Reaction Control Assembly X 
Electronics 
Jet Thrusters 
Fluids 


Spacecraft Drivers Component Drivers 

Heat 

Equipment Duty Cycle Thermal Transfer 

Location Interaction (power level) Capacitance Temperature dT/d0 Mode 



X signifies the primary spacecraft and component drivers 
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9. GROUND SUPPORT EQUIPMENT 

A. INTRODUCTION 

The ACS-peculiar ground support equipment (GSE) must be analyzed 
to the same level of detail as the attitude control system (ACS) to determine 
the total impact of the ACS on the cost and schedule of a program, as well as 
on the safety and confidence of successfully completing all mission objectives. 
The final testing of the ACS not only impacts the cost and schedule through 
design of test hardware production, but also interacts significantly with the 
safety and performance requirements of the payload. 

The GSE and the ACS function together; this functional relationship 
was studied. As the modeling develops in future phases, the interface 
requirements between the ACS and the GSE ■will be quantified by aggregate 
equations and data items within the model. As a first step, a satellite sys- 
tem was examined to establish the nature of the requirements placed on the 
GSE by ACS components. These requirements were identified for earth 
sensors, sun sensors, rate gyros, and reaction wheels . The requirements 
for these items, based on a sample ACS, are described below to demonstrate 
the interrelationship between the GSE requirements and to serve as a basis 
for further effort to quantify these relationships in aggregate equations. 

B. ACS TEST SET 

The ACS test set provides functional testing of the satellite ACS 
and monitors the subsystem performance. A typical test set provides simu- 
lation of signals from the earth sensor, the sun sensor, and the rate gyro 
rates to the satellite subsystem; it may also monitor and control the speed 
of the reaction wheel or other ACS components. The ACS test set may be 
manually operated or automated. A functional schematic block diagram of a 
sample ACS test set is shown in Figure 9-1. The ACS test set is required to 
simulate the performance of the sensors and to introduce these signals into 
the ACS realistically so that the control can be evaluated and the ACS response 
can be monitored. 
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Figure 9-i. Sample ACS Test Set Block Diagram 















i . EARTH SENSOR TEST SET 

The earth sensor assembly (ESA) of the sample ACS scans about 
a null axis 8. 7 deg from the spacecraft spin axis and provides logic level 
outputs to the control electronic assembly (CEA), indicating null axis and 
actual horizon crossing. The scan rate is accurately stabilized so that the 
time between null and horizon crossing may be interpreted as an angular 
pointing error. 

The test set must provide a number of modes for simulating the 
signals of the two ACS earth sensors for this case. The signals that must be 
generated to simulate earth sensor outputs are all pulses with 5- to 10-psec 
rise and fall times. 

a • Earth Sensor Output Simulation 

The radiance logic and the zero crossing outputs of the earth sensor 
must be simulated to permit ACS testing without using an earth sensor. In 
this mode, the test set causes the ACS ESA inhibit signal to attain a logic 
zero level. This will result in the ESA outputs to the CEA. 

b* Bolometer Signal Simulation 

The bolometer radiance signal must be simulated to permit ACS 
and/or earth sensor testing without stimulating the earth sensor under test 
with infrared radiation. In a system with two active earth sensors, the test 
set must be capable of simulating the signals of both earth sensors simul- 
taneously in both of these modes. The test set must provide signals simulat- 
ing the radiance logic and the zero crossing signal outputs of the ESA. 

Except for the pulse duration, the characteristics of both signals are 
identical. 

c * Bolometer Earth Radiance Simulation 

The test set must provide a signal that simulates the bolometer 
radiance signal of the earth viewed by the earth sensor. This test signal is 
applied to the preamplifier test inputs of both earth sensors. The clock 
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signal is used as basic timing in generating the simulated bolometer earth 
radiance signal. In addition, the leading edge of the ACS zero crossing 
signal is used as a timing reference for the positive transition of the test 
signal. 

d. Sun Radiance Simulation 

The test set provides a simulated sun radiance pulse that, on 
command, can be inserted in the simulated earth radiance pulse train. When 
commanded, the simulated sun radiance pulse must occur at the appropriate 
time once during each simulated spin period. 

e . Moon Radiance Simulation 

The test set must also provide a simulated moon radiance signal 
that, on command, can be inserted in a similar manner to that indicated 
for the sun radiance pulse. 

2. SUN SENSOR TEST SET 

A sun sensor assembly (SSA) in the sample system incorporates 
two vertical slits on the face and corresponding apertures on the back, with 
solar cells mounted behind the apertures to detect the time at which the sun 
line crosses the slip plane (via the summed cell outputs) and to measure the 
sun aspect angle at that time (via the differenced outputs). The aspect signal 
is used in sun acquisition, and the crossing signal is used for timing in 
earth as well as sun acquisition. 

The test set must generate signals that simulate the two output 
signals of the sun sensor solar cells and the output of the single sun sensor 
solar cell. In the normal mode, the test set simulates approximately in 
synchronism with the simulated sun radiance pulse from the earth sensor. 

The amplitudes of the simulated outputs of each solar cell are 
equal for a simulated aspect angle of zero. For a positive simulated aspect 
angle, the amplitude of the signal simulating the output of solar cell 1 
increases, and the amplitude of the signal simulating the output of solar cell 2 
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of the same sun sensor decreases at the same rate. For negative simulated 
aspect angles, the changes in amplitudes of the simulation signals are of 
opposite polarity, but of equal magnitude. The range of aspect angles 
required to be simulated is ±5.5 deg. 

The test set must provide a means of varying the amplitude of each 
simulated output of the sun sensors so that the threshold of each individual 
channel of the ACS sun sensor processor may be measured. 

3. RATE GYRO TEST SET 

The rate gyro assembly (RGA) in the sample ACS provides rate 
information for use only during acquisition. The test set must generate a 
signal that simulates constant angular rates being applied to the ACS rate 
gyro. These signals take the form of the constant DC currents transmitted 
to the rate gyro torquer. The magnitude and polarity of the signal must be 
selectable. The power furnishing this signal is isolated from ground. 

The test set is required to supply power to the rate gyro auxiliary 
heater and to provide a display that permits reading the gyro temperature 
to within 2. 8°C. Full power is applied until the gyro temperature signal 
indicates that a gyro temperature of 54. 5 ±2. 8°C has been attained. At the 
indicated temperature, the power is automatically reduced to a pre-adjusted 
level within the range 1. 5 to 3. 0 W. If the gyro temperature signal increases 
to a temperature of 68. 5 ±2. 8°C, the test automatically interrupts the power 
applied to the auxiliary heater. 

4. REACTION WHEEL TEST SET 

The reaction wheel assembly (RWA) provides the angular momentum 
necessary to cancel the momentum developed by the spacecraft. It receives 
drive signals for its squirrel-cage induction motor from the reaction wheel 
electronics assembly (RWEA) and sends a once-per-revolution tachometer 
pulse to the RWEA for speed computation. The RWEA maintains the speed 
of the reaction wheel at a preset value based on the CEA clock input. 
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a . 


Monitoring and Control of Reaction Wheel 


The test set is required to have a monitoring and a combined 
monitoring and control mode for the reaction wheel. 

b . Monitoring Mode 

The test set must allow the operator to determine the reaction- 
wheel speed within 1 part in 2 X 10 4 at any speed greater than 1000 rpm by 
processing the tachometer hardline signal and then measuring the period of 
the signal with the test set electronic counter. 

c - Monitoring and Control Mode 

The test set provides a means of manually switching wheel power 
off by driving the ACS disable (DIS) signal to a zero logic state. When the 
test set allows the DIS signal to reach a logic one level (open circuit), wheel 
power is controlled by the ACS. 

d. Wheel Power Reversal 

The test set provides a method of causing the RWEA to reverse one 
phase of the reaction wheel drive power to reduce wheel rundown time after 
operation at normal speeds. The test set provides this capability by auto- 
matically driving the ACS reversal (REV) signal to a zero logic state when 
the conditions requiring drive power reversal exist. 

Wheel Power Interru ption as a Result of Overspeed Detection 

The test set must cause wheel power to be interrupted automatically 
whenever the reaction wheel speed, as indicated by the tachometer output, 
exceeds 3700 rpm. If this event occurs, the reaction wheel is allowed to 

coast to a stop, rather than braking as specified for deceleration after 
normal speed operation. 

5. THRUSTER VALVE DRIVER TEST SET 

The valve driver assemblies (VDAs) amplify the pulse commands 
from the CEA, and activate valves by grounding the thruster solenoid 
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return lines. The VDAs also enable the appropriate thrusters upon 
command from the CEA, by connecting the high sides of the solenoids to 
the spacecraft bus by a relay. 

The test set provides a means for conditioning the hardline valve 
commands for spin jets and control jets suitable for application via hardline 
digital telemetry unit. 

C * POWER SUPPLY AND AC CONTROL TEST SET 

The test set contains a power supply for furnishing various DC 
voltages required for operation of its components. 

Provision is made for controlling the application of primary power 
to the ACS test set. The provision incorporates overload protection of the 
ACS test set console. Instantaneous cutoff of facility power must not 
adversely affect the console, nor cause the test set to adversely affect any 
satellite equipment. The test set may not be reenergized automatically 
upon restoration of primary power after an interruption. 
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APPENDIX A 


STUDY 2.3 SYSTEM COST/ PERFORMANCE ANALYSIS 


The following Statement of Work is extracted from Request for 
Proposal No. W10- 12296-DHC- 3: 

2 - 3 Systems Cost/Performance Analysis 

Background 

As the space program matures into an applications industry (with 
a supporting effort of exploratory and experimental activities) 
greater emphasis will be placed on improving the ability to pre- 
dict the effect of program requirements on cost and schedules. 
These predictions will be needed as users commit funds and as 
programs proceed through the operational phases. 

The objective of the overall effort, of which this study comprises 
one part, is to assist NASA in the generation and maintenance of 
program models and methodology. The program models will 
include a consistent and compatible set of performance, weight, 
cost and schedule interrelationships to be used in the evaluation 
of proposed and on-going space vehicle programs. 

This vehicle program model methodology will be applicable to 
(expendable and reusable) launch vehicles, orbital propulsion 
stages, space stations, payloads and other vehicles. A secondary 
objective is to provide, to a limited extent, insight into DOD 
decision making criteria and data requirements with the intent to 
making the NASA- developed program models and methodology 
suitable for use in the evaluation of potential joint NASA/ DOD 
programs. 

The efforts under this task will be directed at the analysis of the 
interrelationships between and within the performance, weight, 
safety, cost and schedule parameters; and providing assistance 
where required, in the formulation of NASA cost models. When 
a degree of understanding of these parameters has been achieved 
and the basis for the individual models (cost models, weight 
models, etc. ) is accepted then a Program Model can be developed 
by NASA which combines these characteristics and their 
interrelationships . 
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Emphasis will be placed on relating with quantitative expressions 
the interrelationships by understanding the effect of the proposed 
vehicle characteristics on the material and manpower demands. 
Technical feasibility and levels of risk or uncertainty effects on 
the parameters along with support requirements will be con- 
sidered. Subsystem data will be stressed. 

Aerospace experience with the following two activities will be 
utilized: (a) the development of the Solid Rocket Motor Program 

Model which combines performance, weight and cost factors, and 
(b) the reprogramming of the vehicle synthesis program using 
MSC cost equations, in support of NASw-2301 task 2. 3 during the 
fiscal 72 year. 

The NASA experience with ODIN and IPAD programs will be 
incorporated in the following studies. The contractor shall per- 
form analysis in areas typified by the task listing below: 


2.3. 1 


2.3. 1. 1 


2.3. 1.2 
2.3. 1.3 


2.3. 1.4 


Definition of Program Model Parameters 

The interrelationships between and within performance, 
weight, safety, cost and schedule factors will be deter- 
mined and quantified for typical subsystems such as 
the following: Electric Power, Attitude Control (shall 

include the Attitude Control Propulsion system and the 
Attitude Control Command and Sensing system), and 
the Environmental Control System. 

The contractor shall identify those parameters which 
are likely to be of interest in the accomplishment of 
trade studies for subsystems. 

Functional block diagrams for each subsystem investi- 
gated shall be developed for four classes of space 
vehicles, of increasing system complexity and inter- 
actions: i.e., unmanned, expendable, autonomous 
vehicles; unmanned, reusable, autonomous vehicles; 
manned, reusable, autonomous vehicles; and manned, 
reusable vehicles using ground support systems. 

Typical functional relationships between space vehicle 
systems and supporting systems shall be identified and 
characterized. Using these relationships quantitative 
expressions will be developed. 


2.3.2 Support of NASA Program Model Development 
Activities 

The contractor shall provide support to NASA in development of 
NASA program models. NASA low cost payload, payload effects 
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and tag studies results will be utilized in conducting these studies. 

Typical analysis tasks are listed below: 

2.3.2. 1 Review existing program models in performance, 
weight, cost and scheduling areas and provide an 
assessment of their strengths and limitations. 

2. 3. 2. 2 The contractor shall review existing CER’s and recom- 
mend to NASA those CER T s which require updating due 
to new analyses of historical cost data, and those 
CER's which require modification of the principal 
independent variable. Specific CER's will be updated 
at NASA's request. 

2. 3 . 2. 3 Provide an assessment of the use of program models 
for program control purposes, and provide a dis- 
cussion of alternative display /interrogation techniques. 

2. 3. 2. 4 Provide an informal assessment of DOD program 
model capabilities and requirements, and highlight 
potential areas of conflict or incompatibility with the 
projected NASA program models. 
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APPENDIX B 


TASK 2. 3 DETAILED TASK PLAN 

1 ■ SUB TASK DESCRIPTION 

This plan presents the detailed subtasks to be performed in 
developing a modeling technique to interrelate the parameters of perfor- 
mance, safety, cost, and scheduling. The parameters defined in Table B-i 
will be considered for their utility in the modeling effort. The objective is 
to develop a methodology that permits calculation of these parameters for 
an attitude control system (ACS) meeting given functional requirements and 
to permit tradeoffs among these parameters. Because of the nature of a 
task to develop a new analytical technique, detailed planning is only possible 
for about 3 months in advance. Details of the work to be done after 
December 1972 will be developed as the task progresses. 

This task consists of the subtasks detailed below. The relationship 
of these tasks is given in Figure B-l. The schedule is shown in Figure B-2. 
Manpower distribution is shown in Table B-2. 

a. TASK 2. 3. 1: DEFINITION OF MODEL PARAMETERS 

^ ) Subtask 1: Develop Flow Chart of Design Process 

A series of flow charts will be developed to represent the thought 
processes performed during the evolvement of a design. The flow should 
begin with the functional requirements, and should develop downward to 
component level. These flow charts will satisfy the "functional block diagram" 
task of the statement of work (SOW), since the design thought process will 
depend in part on the system functional mechanization. 

This subtask will be developed in four parts noted below. At the 
conclusion of this subtask, a preliminary program model will have evolved. 
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Table B-l. Definition of Parameters 


Perfo rmance 

Functional requirements 

Technical characteristics: accuracy, drift, etc. 

Power 

Volume 

Weight 

Vibration specification: GRMS random 
Temperature specifications: conduction environment 
Ambient pressure specification: radiation environment 


Safety- 


Failure rate - qualification requirements 

Failure detection: detection technique, false alarm rate 

Cost 


T n fo 1 cf 

Design and development 
Build and checkout 
Test equipment 
Training and simulation 
Maintenance 
Management 


m time (.manpower; ana material 


Schedule 


Sequence restraint 
Man- loading limitation 
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Figure B-l. Subtask Relationship 
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Table B-2. Manpower Distribution 


Subtask 

Title 

Member-of- Technical-Staff 
Distribution 
<%) 

Task 2.3.1 

Definition of program 
model parameters 


Subtask 1 

Develop flow chart of 
design process 

13 

Subtask 2 

Develop background 
information 

7 

Subtask 3 

Develop data 

10 

Subtask 4 

Refine flow chart of 
design process 

25 

Subtask 5 

Model test cases 

15 

Subtask 6 

Model related 
subsystems 

20 

TOTAL 


90 

Task 2.3.2 

Support of NASA program 
model development 
activities 

10 

TOTAL 


100 
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(a) In meetings, a small number of senior engineers will 
lay out a flow chart of the design process as applied to 
ACSs. The goal of this model is to develop, from the 
functional requirements, the detailed reasoning path 
that leads a designer to the component selection level. 

These flow charts will be developed for the ACS for 

an unmanned, expendable vehicle in this prelininary 
phase. While the major attention will be speci- 
fically for ACSs, cognizance of interface require- 
ments with other subsystems (such as environmental 
control, power, and communications) will be 
maintained. 

(b) A literature search will identify published versions of 
the "proper" design proces s for equipment similar to 
an ACS. This information will be used to further 
develop the flow charts prepared under Subtask 1(a). 

(c) Modeling of costs and schedules loosely related to the 
functional block diagram of the design process will be 
investigated. Many requirements for a design do not 
appear in the thought process described in the flow 
charts. Examples are type of drawing format imposed, 
level of management control imposed, and reporting 
and documentation requirements of the contract. 

Emphasis will be placed on relating such elements to 
the flow charts to form a more comprehensive model. 

(2) Subtask 2: Develop Background Information 

This subtask will review and develop information on the more 
traditional cost estimating models in existence at The Aerospace Corporation 
and elsewhere to support the other modeling efforts of this task. It will 
consist of the following parts: 

(a) Review, understand, and attempt to build on the work 
performed by Honeywell, Inc. in their attitude control 
costing study. 

(b) Review other available cost modeling tools, such as 
the Unmanned Spacecraft Model and the Solid Rocket 
Motor Program Model to determine strengths, 
weaknesses, and applicability of these approaches to 
the task under consideration. 

(c) Review general cost data available within The Aerospace 
Corporation and the NASA REDS TAR data base, and its 
ACS data. 
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(3) Subtask 3: Develop Data 

This subtask will compile the data selected from the review of the 
Aerospace and NASA data base performed under Subtask 2(c). This data, 
together with the data base available in the Honeywell study, will form the 
basis for testing the modeling efforts under Subtasks i and 4. It is believed 
that the Honeywell data base will prove the most useful for this purpose. 

(4) Subtask 4: Refine Flow Chart of Design Process 

This subtask will develop refinements for the modeling technique 
based on the preliminary modeling of Subtask 1 and other information. The 
refinements to the preliminary model will emphasize the incorporation of 
the non-design-oriented elements defined in Subtask 1(c). Also included in 
this subtask is ascertaining the relationship of cost and schedule parameters 
to the design thought processes. In addition, traditional cost modeling tech- 
niques will be used where they appear to be beneficial. Another possible 
refinement would be to include some dynamic features into the model. 

(5) Subtask 5: Model Test Cases 

As the flow charting of the design process develops, an attempt 
will be made to devise test cases to assess the validity of the model. As 
stated earlier, it is believed that the data base obtained from the Honeywell 
study will be the most useful for this purpose. If other data appears bene- 
ficial, either available data will be employed, or the need for additional data 
will be identified from other NASA contracts. 

(6) Subtask 6: Model Related Subsystems 

The current opinion is that modeling related subsystems will not be 
useful for one of the following reasons: 

(a) The entire task budget will be usefully expended in the 
ACS modeling task. 

(b) The modeling task will have encountered sufficient 
difficulties that modeling other subsystems does not 
appear profitable. 
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If these conditions do not prevail, modeling of the design process for 
related subsystems will be investigated using the same methodology developed 
for ACSs . 


b. TASK 2. 3.2: SUPPORT OF NASA PROGRAM MODEL 
DEVELOPMENT ACTIVITIES 

This task is planned as a level of effort support to NASA in the 
development of NASA program models as specifically requested by NASA. 
This effort will be based on existing program models and methodology, 
rather than the new methodology under consideration in Task 2. 3. 1. 

2. REVIEW MEETING 

Because of the nature of this task, which develops new analytical 
approaches along lines previously developed by the study director, frequent 
review meetings are scheduled early in the task. At the present time, only 
the quarterly reviews are scheduled late in the task. Additional review 
meetings will be scheduled between these quarterlv reviews, if reauired. 

— «■ X 

Review meetings are anticipated on approximately the following dates: 


a. 

19 October 1972 

b. 

8 November 1972 

c „ 

22 November 1972 

d. 

15 December 1972 

e. 

17 January 1973^ 
15 March 1973 1 

f. 

g- 

27 September 1973 

DELIVERABLE ITEMS 


The deliverable items will consist of the following: 
a. Monthly letter progress reports 


Joint Task Review Meetings 


I 
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b. Midterm and final presentations describing general 
activities and achievements of the task 

c * Final report, which will discuss the modeling techniques 
evolved and the degree of achievement of the goal of 
developing a more effective means of evaluating and con- 
trolling program costs. The degree of success achieved 
and the degree to which the resulting modeling technique 
should be programmed for a computer will be evaluated. 
The modeling technique developed will be presented in 
flow chart form. 
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APPENDIX C 


TUG ACS SIMULATION STUDIES 
1. INTRODUCTION 

This section presents results of a preliminary Tug attitude control 
system (ACS) trade study obtained using the Cost/Performance Simulation 
described in Section 5. The preliminary nature of these results arises from 
two considerations: first, much of the simulation data base is itself prelimi- 

nary, having been taken from Tug contractor documents representing a very 
early stage of tug development; and, second, the Cost/Performance Model 
has not been fully verified against other cost/performance models. Therefore, 
the following Tug trade studies should be considered primarily a demonstration 
of the Cost/Performance Simulation and a starting point for future trade 
studies following refinement of the simulation and its data base, 

2 - TUG ACS TRADE STUDY DATA BASE 

The simulation data base used for trade studies is presented in 
Tables C-l through C-6 with data formatted according to the description of the 
data base matrix in Section 5, and with component attributes formatted accord- 
ing to the data base described in Section 6. 

As various contractor-defined candidate ACSs depend primarily on 
sensor configurations and on specific sensors used in each configuration, 
most of the data base is concerned with sensor characteristics. Thus, 

Table C-l lists attributes of specific inertial measurement units (IMUs); 

Table C-2 presents attributes of specific horizon sensors; and Table C-3 is 
concerned with star reference characteristics. Each table lists attributes for 
three sensors, presenting 27 possible ACS combinations for a single- string 
mechanization, 27 active/ standby mechanizations, and 27 triply redundant/ 
voting mechanizations, in total, 81 possible ACSs are presented. All safety 
parameter values in Tables C-l through C-6 were engineering estimates and 
were not contractor-defined. 
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Table C-l, IMU Data Base 


Program 

Mnemoni 


Manufacturer, System 
Type 

Alignment accuracy 


Attribute 

Units 


Strapdown, gimbal 


1.MU 1 

(Current Strapdown) 

Hamilton Standard, 
DIG 

Strapdown 


IMU 2 (Develop- 
mental Strapdown) 

MIT, DODEC 


Strapdown 


IMU 3 

(Current Girnbaied) 


Deleo, Carousel 


m 3 (ft 3 ) 


22,2 (49) 

0. 017 (0. 6) 


55.4 (122) 
Q. 045 (1.6) 


20. 4 (45} 
0.052 (1. 84) 


Temperature 1 
Temperature 2 
Pressure 
Failure rate 1 
Failure rate 2 

No. of parameters 
monitored 1 

No. of parameters 
monitored 2 

Parameter total 
Failure rate 3 
Failure rate 4 
Failure rate 5 
Failure rate 6 
Failure rate 7 
Failure rate 8 
Failure rate 9 
Failure rate 10 
Failure rate 1 1 


failures /hr 
failures /hr 


failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
$ 


Active mode 
Dormant node 


Hardware design, 
development, test, 
and evaluation 

Software design, 
development, test, 
and evaluation 


Prototype develop- 
ment' time 



Table C-2. Horizon Sensor Data Base 


Program 

Mnemonic 


Manufacturer , system 
Type 

Accuracy 


Attribute 

Units 


Comments 


Conical scan/edge 
track 


Horizon 
Sensor 1 


Conical scan 


Horizon 
Sensor 2 


Barnes, 13-192 Quantic, IV 


Edge track 


Horizon 
Sensor 3 

TRW/ MOBS 
Edge track 


m 3 (ft 3 ) 


7.9 (17. 5) 


31.8 (70) 


Temperature 1 
Temperature 2 


Radiation 

Conduction 


Failure rate 1 
Failure rate 2 

No. of parameters 
monitored 1 

No. of parameters 
monitored 2 

Parameter total 
Failure rate 3 
Failure rate 4 
Failure rate 5 
Failure rate 6 
Failure rate 7 
Failure rate 8 
Failure rate 9 
Failure rate 10 
Failure rate 1 1 


failures /hr 
failures /hr 


failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
$ 


Active mode 
Dormant mode 


Hardware design, 
development, test, 
and evaluation 

Software design, 
development, test, 
and evaluation 




Table C-3. Star Reference Data Base 


Program 

Mnemonic 


Manufacturer, system 
Type 

Update accuracy 


Attri hute 
Units 


Comments 


Straprlown, girnbal 


Star 

Reference 1 
Kollsman 


Sta r 

Reference 2 


Star 

Reference 3 

Honeywell 

Strapdown 


13.6 (30) 
0.028 (1)' 


0. 034 (1.2) 


0. 017 (0. 6) 


Temperature 1 
Temperature Z 


Conduction 


Failure rate 1 

Failure rate 2 

No. of parameters 
monitored 1 

No. of parameters 
monitored 2 

Parameter total 
Failure rate 3 
Failure rate 4 
Failure rate 5 
Failure rate 6 
Failure rate 7 
Failure rate 8 
Failure rate 9 
Fai lure rate 1 0 
Failure rate 1 1 


failures /hr 
failures /hr 


failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
& 


Active mode 
Dormant mode 


Hardware design, 
development, test, 
and evaluation 

Software design, 
development, test, 
and evaluation 

Unit cost 
(no. of units) 


0. 582 X 10' 


178.7 X 10 


1 . 1 36 X 10' 
1. 136 X 10" 


170. lx 10 J 













Table C-5. Actuator Data Base 




Attribute 


Program 

Mnemonic 


Attribute 

Units 


Comments 


Weight 
Volume 
Vibration 
Temperature 1 
Temperature 2 
Pressure 
Failure rate 1 
Failure rate 2 

No. of parameters 
monitored 1 

No. of parameters 
monitored 2 

Parameter total 
Failure rate 3 
Failure rate 4 
Failure rate 5 
Failure rate 6 
Failure rate 7 
Failure rate 8 
Failure rate 9 
Failure rate 10 
Failure rate 1 1 


kg (lb) 
m 3 (ft 3 ) 


fai Lures /hr 
failures / hr 


failures / hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 
failures /hr 


Time 2 
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Table C-6. Energy Source Data Base 


Attribute 

No. 

Attribute 

Program 

Mnemonic 

Attribute 

Units 

Comments 

Energy Source 

Tank 

Regulator 

Lines 

1 

2 

3 

4 

5 

P owe r 


W 



20 


6 

"Weight 


kg (lb) 


22.7 (50) 

4. 5 (10) 

22. 7 (50) 

7 

Volume 


m 3 (ft 3 ) 


0. 057 (2) 

0.0057 (0.2) 

0. 0057 (0. 2) 

8 

V ibration 







9 

Temperature 1 







10 

Temperature 2 







it 

Pressure 







12 

Failure rate 1 


failures /hr 


1 X 10 -8 

3 X 10~ 7 

2 X IO" 7 

13 

Failure rate 2 


failures /hr 


15 

15 

15 

14 

No. of parameters 




5 

5 

tr 


monitored 1 






t) 

15 

No. of parameters 




20 

20 



monitored 2 






V 

16 

Parameter total 







17 

Failure rate 3 


failures /hr 


l X i0‘ 6 

1 X IO* 6 

1 X 10* 6 

18 

Failure rate 4 


failures /hr 


1 x io“ 6 

1 X IO* 6 

1 x to* 6 

19 

| Failure rate 5 


fai hires /hr 


l x 10" 6 

1 X !0* 6 

1 X to* 6 

20 

Failure rate 6 


failures /hr 


1 X 10‘ 6 

1 X 10" 6 

l x to* 6 

21 

Failure rate 7 


failures /hr 


1 X 10" 6 

1 X 10* 6 

I X to" 6 

22 

Failure rate 8 


failures /hr 


i x 10‘ 6 

1 x io" 6 

t X to* 6 

23 

Failure rate 9 


failures /hr 


1 X 10‘ 6 

1 X IO* 6 

1 X to* 6 

24 

Failure rate 10 


failures /hr 


l x to' 6 

1 x to* 6 

1 x to" 6 

25 

Failure rate 1 1 


failures /hr 


1 x to" 6 

1 X to' 6 

1 X to* 6 

26 

Cost 1 




1 X to 6 

1 X to 6 

1 x to 4 

27 

Cost 2 







28 

Cost 3 




1 X 10 4 

1 x io 4 

1 X to 3 

29 

Time 1 







30 

Time 2 









The specific sensors selected represent typical sensors currently 
available wi'thin industry. For example, Table C-l lists attributes of a cur- 
rent strapdown IMU, a developmental strapdown IMU, and a current gimbaled 
IMU. Similarly, conical scan and edge tracker horizon sensors are repre- 
sented, while both gimbaled and strapdown star references are listed. 

Attributes for the Processor Module, the Actuator Module, and the 
Energy Source Module are presented in Tables C-4 through C-6, with each 
module limited to a single entry, due primarily to the lack of available data. 

3. TUG ACS TRADEOFF CONFIGURATION/ MECHANIZATIONS 

The Cost/Performance Simulation is programmed to consider all 
combinations of data base components in configuring systems processed by the 
performance aggregate equations. Systems consisting of component combina- 
tions that meet or exceed the performance criteria are designated as acceptable 
configurations and are stored in the answer matrix for processing by the 
safety aggregate equations. As each acceptable configuration is mechanized 
and processed by the safety equations as a single - string ACS, answer matrix 
attributes are updated as described in Section 5. Similarly, each of the same 
configurations is processed by the safety equations as an active/standby and a 
triply redundant/voting ACS. Thus, for each acceptable configuration, three 
separate ACS mechanizations are formed and stored in the answer matrix. 

Section C. 4 presents trade results, showing system cost versus 
system weight and system autonomy, for each mechanization of each configura- 
tion described above. In addition, voting versus standby redundancy, and 
gimbaled versus strapdown IMU systems are compared. 

As previously mentioned, autonomy is ranked as a trade study result. 
Table C-7 represents four levels of autonomy as defined by NASA. These 
four levels represent a much broader definition than is used in the trade 
results presented in this report. The definition of Table C-7 encompasses 
not only the ACS, but also other areas, such as the communication, rendez- 
vous and docking, and telemetry subsystems that are outside the scope of the 
present Cost/Performance Model. 
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Table C-7. Space Tug System Levels of Autonomy 


Level I Autonomy 

Completely independent of any man-made inputs after separation 
(such as beacons, orbiter and ground) 

Onboard measurements and calculations that enable mission to be 
completed in its entirety, including all Tug and payload operations 

Final onboard rendezvous and docking capability 

Command uplink override capability and telemetry downlink 

Level II Autonomy 

Ground or navigation satellite beacons (either required to serve 
multiple users) acceptable 

Level I autonomy required for those orbits where ground or satel- 
lite beacons do not provide satisfactory state determinations 

Final onboard rendezvous and docking capability 

Command uplink override capability, including payload status, 
redirection, and retargeting of mission with telemetry downlink 

Level 111 Autonomy 

Ground stations providing state update during entire mission 
Onboard calculations performed for mission completion 
Final rendezvous made by onboard capability 
Final docking with ground support 
Command and telemetry capability 

Level IV Autonomy 

All phases controlled from the ground 

Calculations performed primarily on the ground (such as main 
burn and midcourse - duration and direction) 

Ground controlling final rendezvous and docking 

Command and telemetry capability 
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The definition used in this report quantifies autonomy as ACS failure 
detection probability, and this depends entirely on the calculation of failure 
detection probability made in the safety aggregate equation module. Thus, 
w hile the failure detection probability may differ among single-string, active/ 
standby, and triply redundant mechanizations of each ACS configuration, no 
provision is made in the safety aggregate equations to determine if these cal- 
culations are performed onboard or by a ground computer. (The provision 
could be added in future refinements of the safety aggregate equations.) Thus, 
while failure detection probabilities provide for a means for quantifying auton- 
omy, and do indeed measure the self-capability of the system to determine its 
operational capability, they do so in a limited manner. In effect, failure 
detection probability provides a means of quantifying the autonomy of each 
ACS mechanization within each of the major categories listed in Table C-7. 

4. TUG ACS TRADE STUDY EXAMPLES 


An example for a baseline three-axis mass expulsion ACS presented 
in this section was obtained using the Cost/Performance Simulation described 
in Section 5 with the performance criterion of pointing accuracy set at 0. 7 deg, 
and the reliability specification set at 0. 97 over a mission time of 4 hr. All 
results represent a build of Z0 ACSs using data given in Tables C-l through 
C-6, all possible combinations of ACS represented by these data passed the 
periormance criterion. Thus, Z7 separate ACS configurations or 81 ACS 
mechanizations are represented by the following material. 


SYSTEM COST AND WEIGHT VERSUS SYSTEM 
MECHANIZATION 


Broad types of system mechanizations are compared on a cost basis 
by averaging the cost of all single- string ACS and comparing them to averaged 
active /standby and averaged triply redundant system costs. System weights 
are also averaged in a similar manner; the results are presented in Table C-8. 

The results shown in Table C-8, indicating incremental costs and 
weights, are reasonable with each additional ACS string, adding a cost and 
weight penalty appi oximately equal to the basic single-strong figures. 
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; 


Results are compared to SAMSO/ Aerospace cost estimating relationships 

(CERs) developed for unmanned spacecraft to judge the validity of absolute 
cost and weight numbers (Ref. 1)* 


Table C-8. System Cost and Weight 


Type of 

Cost 3- 

Weight^ 

Mechanization 

(millions of dollars) 

(kg) 

Single-String 

151 

189 

Active / Standby 

239 

377 

Triply Redundant 

327 

565 


a 

Average cost of 27 configurations 
Average weight of 27 configurations 


The CERs used are given in Eqs. (C-l) and (C-2). 

DDTE Cost = (4. 01 5)(IF)[21 90. + (25. 3)WT] (C-l) 

First Article Cost = (3. 48)(IF)[28. 9 + 9. 45 WT] (C-2) 


where 

DDTE Cost = design, development, test, and evaluation costs in 
thousands of dollars 

IF = inflation factor, using 1971 as a base year = 1. 114 
WT = weight in kilograms 

Since Eq. (C-2) gives first article cost, and cost/performance results 
are for a build of 20 units, a learning curve must be applied to the SAMSO/ 
Aerospace CER to obtain the total cost of 20 units. The following material 
presents a brief explanation of the learning curve used to convert first article 
cost to the cost of 20 units. 
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(1) Learning Curve Derivation 


An exponentially decreasing cost per unit is assumed as given in 
Eq. (C-3 ) . 


c n = K t (FAC) + K 2 (FAC) exp [-K 3 (n- 1)] (C-3) 


where 

3 cost of the nth unit 
FAC = first article cost 
also defined 

SAC = stabilized last article cost 
P - ratio of SAC to FAC 

Stabilized last article cost is the cost per unit that would result for the last 
unit of a large build of systems where costs no longer decrease due to the 
learning process. 

Constants and are evaluated by setting - FAC for n = 1 
and = SAC for large n. The result is Eq. {C-4). 

c n = (FAC) jp + (i - P) exp [-K 3 (n- l)]j (C-4) 

To find C™ the total cost of N units, c is summed over N units. 

1 n 

C T = Z % < C - 5 > 

n= 1 

-K 3 

Equation (C-5) is a geometric series with a "common ratio 11 of e 
The sum may be written in terms of the first term, the number of terms, and 
the common ratio. The final result is given by Eq. (C-6). 
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C T = (FAC) j NP + (1 - P) 


(C-6) 


1 - exp(-K^N) 
l""- exp(-K 3 ) 


If one uses Eq. (C-6), given FAC and N, values must be chosen for 
P and K^. For example, past history may show that the per-unit cost for a 
large build of a certain type of system stabilizes at 80% of first article 
cost after many systems are built. This would set P = 0. 8. 

The constant determines the rate at which the cost per unit 
stabilizes. If 95% of the difference between FAC and SAC is to vanish by 
the thirteenth unit, must satisfy -K 3 (13- 1) = 3, since exp[-3] £ 0.05. 

For values of P and in the above example, the per-unit and 
total cost expressions are given by Eqs. (C-7) and (C-8). 


c = (FAC) 
n 

C T = (FAC) | 


0.8 + (h Z exp 


- (n - 1)1 

4 J 1 


0. 8N + 0. 2 


- exp (- D 

L 1 ' “ p f i) 


(C-7) 


(C-8) 


(2) Cost/Performance - CER Comparison 

Figure C- 1 compares the results of the cost/performance figures 
given in Table C-8 with CERs given in Eqs. (C-l) and (C-2). Equation (C-8) 
was used to find the cost for 20 ACSs, using first article cost calculated 
from Eq. (C-2). 

As seen in Figure C-l, the Cost/Performance Model exhibits a 
lower slope in the cost- weight plane than does the SAMSO / Aerospace model, 
with the two models showing the same costs for systems weighing approxi- 
mately 187 kg. When the preliminary nature of the cost /performance data 
base is considered, it is concluded that agreement between the two models 
is acceptable. Also, it is anticipated that the cost/performance curve may 


C-13 



Total ACS Cost, 
millions of dollars 


RELIABILITY = 0. 97 
PERFORMANCE = 0.7 deg 
TOTAL ACS COST IS FOR 20 ACS 


SAMSO CER' 


• / ! 



-7^-1 

r * • • - 1 


/ ENVELOPE 
/ CONTAININ 


CONTAINING 27 
TRIPLY 
REDUNDANT 
MECHANIZATIONS 


/ / ENVELOPE CONTAINING 
/ / 27 ACTIVE/STANDBY ACS 

f y MECHANIZATIONS 


'ENVELOPE CONTAINING 27 
• SINGl E-STRlNr, A CS MPru, 


SINGLE-STRING ACS MECHANIZATIONS 


200 400 600 800 1000 1200 1400 1600 1b 


200 300 


600 700 


ACS WEIGHT 


Figure C-i. Total ACS Cost vs ACS Weight 
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rise as the model is refined and additional cost factors are included. Note 
that the Cost/Performance Model emphasizes the fact that the cost-to-weight 
relationship for real systems is a set of discrete points with gaps, rather 
than the continuous curve implied by the CER. 

b. COST OF VOTING VERSUS STANDBY REDUNDANCY 

The dollar and weight/cost of an additional string in the ACS to 
implement voting, instead of standby redundancy, may be seen in Figure C-l. 
The results of the computer run show that the dual string mechanizations 
generate reliabilities of approximately 0. 9996, while triply redundant 
mechanizations give 0. 99999 reliable systems. {See Figure C-2. ) Due to the 
preliminary nature of the data base, no conclusions regarding these results 
should be drawn at this time, 

c. GIMBALED-VERSUS-STRAPDOWN SYSTEMS 

Average system cost, weight, and volume figures show very little 
sensitivity to gimbaled versus strapdown IMU implementations with typical 
costs of 150 million dollars, weights of approximately 195 kg, and volumes 
of 0. 31 m per ACS string for either gimbaled or strapdown IMUs. It is 
concluded that insensitivity to IMU type in this case is attributed to the fact 
that IMU power, weight, and volume contributions represent a relatively 
small percentage of system totals. 

d. SYSTEM AUTONOMY 

As mentioned in Section 2, system autonomy is quantified as system 
failure detection probability. Calculation of failure detection probability 
depends on knowledge of the total number of ACS parameters that must be 
rrmnitored to ensure detection of a failure, and on knowledge of parameters 
actually monitored and of monitor system failure rates. As none of these 
data are available at the present time, realistic assessment of system auto- 
nomy is impossible. However, purely as a demonstration, values were 
assumed for these parameters and results are presented below. Parameter 
values used are given in Tables C-l through C-6. 
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If one assumes that, out of the 2 0 parameters required to ensure 
failure detection, 15 per component are monitored on active strings and 5 
per component are monitored on standby strings, and that all monitor system 
failure rates are 10 failures per hr, the following failure detection prob- 
abilities (FDPs) result: 

Single -string: FDP ^ 0. 75 

Active /standby : FDP = 0.45 

Triply redundant: FDP =0.75 

The inputs giving the above results were selected to exercise the computation- 
al algorithms and are not representative of a real system. In a single -string 
configuration, it is likely that no parameters would be monitored, giving an 
FDP of zero. In a triply redundant system, the presence of the voter output 
implies that all parameters are monitored, giving an FDP of near unity. 
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APPENDIX D 


SUPPORTING ANALYSES 


!• ON-ORBIT POINTING ACCURACY AGGREGATE EQUATIONS 

This appendix derives the error equations for the attitude reference 
system for an Agena-type attitude control system (ACS). The spacecraft 
control axes are defined in Figure D-l. 

The vehicle pitch axis pointing error 0 € will be defined as 

6 e = 9 R - 0 (D-l) 


where 


9r - vehicle pitch control reference 

0 = pitch attitude with respect to local vertical 

The vehicle pitch control reference can be expressed in terms of 
the gyroscope, horizon sensor, electronics, and mechanization parameters . 
Referring to Figure 4-6, one can write the following Laplace transform 

expression for 0 (S): 

-K. 


e R (S) 


H 0 6 H/S< S) + S P < S > + “v (S)) 


S + H, 


(D-2) 


where 


Hg = pitch horizon sensor gain 
H v = pitch decoupling gain 

e 

= pitch horizon sensor reference 
= preprogrammed orbit rate 
ojy = pitch axis body rate 
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The horizon sensor reference 0pj/g can be expressed as 


® jf/S - ® + /c) 


H/S'e 


(D-3) 


where 


(©H/S^e ~ ^ orizon sensor error. 


The pitch axis body rate can be expressed as 


“y = 0 - w 0 + (0 g) t 


(D-4) 


where 


coq = local vertical orbit rate 
(9 ) £ = pitch gyro error. 

B 


Substituting Eqs. (D-2), (D-3), and (D-4) into Eq. (D-l), the pitch pointing 
error can be expressed as 


0 e (S) = 


(H e " h fJ e + H e^ 0 H/s^€ + (“op ' w o ) + 


g E 


S + H, 


(D-5) 


The steady-state pitch pointing error can be expressed as 


e ss€ (S) = s ™ se e (S) 

= [( H e- H F e >/ H F 6 ] 9 t [ H e /H F e ](e H/s ) t 

+ [1/H ] (o - u ) + [1/H ] (9 ), (D-6) 

fc> 0 s 
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r msjor srror sources contribute to the pitch pointing errors 
gyroscope, horizon sensor, electronics, and those associated with the 
mechanization. Using Eq . (D-6) as a starting point to indicate how sensi- 
tivity coefficients are determined, one can develop a complete set of error 
sources, multipliers, and sensitivity coefficients, as shown in Table D-l. 
Similarly, the equations for the roll and yaw axes can be determined. The 

roll axis errors are shown in Table D-2, and the yaw axis errors are shown 
in Table D-3. 

The error terms used in the pointing accuracy aggregate equations 
are indicated in the tables by asterisks. Additionally, the terms for roll and 
yaw gyro alignment in Table D-3 were linearized by substituting the orbital 
rate for the vehicle pitch rate in the multiplier. 

PRQPEbLANT CONSUMPTION AGGREGATE EQUATIONS 
a. RATE REDUCTION AND MANEUVERS 

At various times during spacecraft life, the control system must 
stabilize the spacecraft from moderately high initial rates. Moderately high 
means that the spacecraft control system tends to operate linearly because 
the effects of a deadzone are negligible (except that the settling time is 
increased by the amount of time needed to traverse the deadzone). This is 

especially the case for a spacecraft (like the Agena) with pulse modulator 
controllers . 

A simple model of a pulse modulator is a hysteresis switch with a 
lag network in the feedback. If the feedback lag network transfer function is 


then the modulator can be linearized via the equivalent transfer function 

K(tS + 1) 
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Table D-l. Pitch Axis Steady-State Errors 


Error Sources 

Multiplier 

Sensitivity 

Coefficient 

Pitch Gyroscope 



Linearity 

to 

y 

i/H 

F 0 

Roll alignment 

00 

X 

1/h f 

F e 

Yaw alignment 

00 

z 

1/H 

F e 

G- insensitive drift 

i 

i/H 

f e 

Horizon Sensor (pitch channel) 



Linearity 

e 

V h f„ 

Alignment 

1 

% /h f 6 

Noise 

■jL. 

^(jw) 

H 0 /H F e 

Null 

l 

H e /H F e 

Horizon anomalies ' 

l 

h 6^ h f 0 

Electronics 



Electronic gain mismatch 

e 

i/H 

F 0 

Mechanization i 



Euler cross coupling 

# 

i/H 

F 0 

Orbit rate mismatch * 

. ‘“Op.'V „ 

l 

i/H p 

F 0 

Vehicle alignment 

l 

1 


Major error sources 
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Table D- 2. Roll Axis Steady- State Errors 


- 

Error Source 

Multiplier 

Sensitivity 

Coefficient 

Yaw Gyroscope 



Linearity 

CO 

X 

1/(h f + “01 ) 




Pitch alignment 

OJ 

y 

‘/( h f +<, 01 ) 
\lf 

Yaw alignment 

CO 

z 

1/(H f +u 01 ) 



Hr 

G- insensitive drift 

1 

1/(h f, + “oi» 

i f 

Horizon Sensor (roll channel) 



Linearity 

0 

V'V + “ol> 

Alignment 

❖ 

1 

V (H f +(O 0i ) 
+ 

Noise 

f 2 (jw) 

V (H f + “01 ) 



Hr 

Null 

1 

• 

+ W 01 ) 

Horizon anomalies 

1 

V 

V (H F + “W 

Tlr 

Electronics 


T 

Electronic gain mismatch 



Roll electronics 

0 

l/fco 02 ( H F +“ 0 1 )] 

i|r 

Yaw electronics 

0 

1/(B f + *„,) 




Cross coupling gain 

i 

1 /fu 02 {H F +w Ql )l 

iff 

Mechanization — -- 

Euler cross coupling 

• 

00 

jL 

1/(H f +u> 01 ) 

Orbit rate mismatch 
(w o - “01* 


Hr 

0 

!/(H f + <a ) 

i 

(oJ 02 ~ w 0 ) 


1/to 02 (H F +w 01 ) 

Vehicle alignment 

1 

Hr 

1 


Major error sources 
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Table D-3. Yaw Axis Steady- State Errors 


Error Sources 

Multiplier 

Sensitivity 

Coefficient 

Yaw Gyroscope 



Linearity 

CO 

z 


Pitch alignment 

CO 

y 

H F ^ w 02 (H F. +a) 01^ 

<p jp 

h f 02 (h f ; +w 01« 

<t> ifl 

Roll alignment 

CO 

X 

G-insensitive drift 

1 

H F^ / f co 02 {H F ^ + W 01^ 

Roll Gyroscope 



Linearity 

“x 

1/<o 02 

* 

Pitch alignment 

CO 

y 

<M 

O 

3 

Yaw alignment 

CO 

z 

1/u 02 

G-insensitive drift 

1 

1/w 02 

Horizon Sensor {roll channel) 



Linearity 

<t> 

Vp/VW 

W 02 (H F, + 
ip 

Alignment 

1 

“02 (H f. + “01 ) 

+ “01 : > 

tl) 02^ H F^ ) * w 01^ 

Noise 

f 3 (jw) 

Null" 

1 

h * h f 0 -V h f 0 + “oi> 

w 02^ H F^ + 

Horizon anomalies 

J. 

1 

h * h f -V h f, +<o 01 ) 

4 0 

aJ 02 (h, F. + w 01* 


2$C 

Major error sources 
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J aJ>l<! l)-3 # Yaw Axis Steady-State Errors (Continued) 


— 


1 — . 

Error Sources 


Sensitivity- 

Coefficient 

Electronic s 



Electronic gain mismatch 



Roll electronics 

0 

1/[co 02 ( h f ^ + w Ql )] 

Yaw electronics 

9 

0 

1 /[a> 02 (H F +w 01 )] 
0 

Cross coupling cu^ 

0 

Mechanization 



Euler cross coupling 

00 

H F ^ W 02 (H F + W 01 ^ 
0 0 

Euler cross coupling 

00 

1 ^ w 02 

Orbit rate mismatch 



(w 02 " “0 ) 

0 

1/w 02 

(w 0" w 01 ) 

0 

1 y 

Vehicle alignment^ 

1 


Major error sources 
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where 


K = l/K M 

and 


Alternately, we can consider a linear controller with a rate gain 
of K and a rate gain divided by a position gain of t. Then, again, the con- 
troller transfer function is K(rS + 1). Under these assumptions, the space- 
craft control loop for each axis can be represented as a second-order trans- 
fer function with natural frequency w given by 

co = (K/l) 1/Z 

and damping ratio £ given by 

i = wt/2 

where I is the inertia of the spacecraft axis under consideration. 

When the response of the second-order loop to an impulsive torque 
(equivalently, an initial rate error) is considered, it is found that the abso- 
lute rate variation during convergence from an initial angular rate of 9 Q is 

Gj'JeJ (rad/sec) 

where 

G i = (1 + Ze ~ 1]/2 + e"V(l + e _T1 ) 

and 

q = 2ir/(l - £ 2 ) 1/,Z for £ 2 < 1. 
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Absolute rate variation is defined as the sum of the absolute 
difference between successive rate peaks. Thus, if the initial rate is ©g, 

% I 

the peak overshoot rate is 9^, and the peak reversed overshoot is then 
the absolute rate variation during the cycle is 

I®1 ' ®of + 1®2 " 

The reason for computing the absolute rate variation is that the propellant 
required to remove a spacecraft rate (i.e. , to remove spacecraft angular 
momentum) is independent of the sign of the rate. 

The angular impulse required to stop the initial angular rate of 6g 
is the absolute rate variation times the inertia about the axis under 
cons ideration: 


IGfJe o | (N-m-sec) 

The linear impulse required is the angular impulse divided by the effective 
control lever arm 


I 


G M 

i 


(N-sec) 


It is assumed that the angular impulse is removed via thrusters that produce 
a control force at lever arm l about the center of mass of the spacecraft. If 
the propellant specific impulse is I (N-sec /kg), then the weight of propel- 
lant required to remove an initial rate of ©g on one control axis is 



1G d® 0 | 

1 1 


(kg) 


D-10 



This is the propellant weight required, for example, to null a rate of 8 Q 

induced by the powered- flight controller at powered-flight termination. 

If a maneuver is executed by inducing a rate 0 q (e.g. , by torquing 

a gyro), keeping this rate for a time t (where 0 = 0 A t is the maneuver 

nri 0 m 

angle), then the propellant consumption for the maneuver is 

l I 

sp 

The factor 2 accounts for the initial rate error of -0 Q at the start of the 
maneuver (when gyro torquing was begun), and a rate error of +0 Q at the 
end of the maneuver (when gyro torquing was stopped). If there are N 
maneuvers, all at the rate 0^ and all with the same spacecraft and con- 
troller parameters, the propellant weight required per control axis is 



If the maneuver occurs about more than one axis, the maneuvers about the 
separate axes are considered as separate maneuvers; this assumes that the 
maneuver angles and rates are small enough so that "Euler coupling” can 
be neglected. 

b. COASTING FLIGHT 

During the spacecraft life, when it is essentially quiescent, the pro- 
pellant consumption is that required to maintain the spacecraft attitude at 
some fixed roll, pitch, and yaw orientation angles of 0 Q , 0 O , $ Q (these angles 
are assumed "small," as in the case of earth pointing at a fixed target close 
to nadir). The propellant required during this attitude hold period can be 
conservatively estimated as the sum of two parts; 

(1) Propellant consumption for limit -cycle motion 

(2) Propellant consumption to counteract environmental dis- 
turbance torques. 
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A less conservative assumption would be to assume that (because of the 
disturbance torques), the controller operates almost always at one edge of 
the deadzone, so that only propellant consumption to counteract disturbance 
torques must be considered. However, if the control thruster impulse bit 
is large, and the disturbance torques are small, the propellant consumption 
is very nearly the propellant consumption for limit-cycle motion. Since 
generally (1) or (2) is small compared to the other, it is logical to add the 
two contributions to get a conservative bound. 

( 1 ) Limit -Cycle Propellant Consumption 

If the change in spacecraft rate per minimum impulse bit thruster 
firing is A9 (so that the minimum impulse bit is I AG), and if the spacecraft 
is in a symmetric limit cycle, then the symmetric limit-cycle period is 

P SLC = 8D / A ® 

where D is the deadzone. Symmetric limit cycle means that the spacecraft 
rotates with a rate of +A9/2 from 0 = ~D to 0 = +D, then a thruster pulse is 
fired that changes the rate to -A0/2, then the spacecraft rotates with a rate 
of -A0/2 from 0 = D to 0 = -D, another pulse is fired that changes the rate 
back to +A9/2, and the process continues. 

Since two pulses are fired every period, the symmetric limit-cycle 
firing duty cycle 'Vg^Q is (in the absence of noise) 

y SLC = Z/P SLC = A ®/ 4E> (no noise) 


There is usually some noise in the control signal that actuates the 
control thrusters. The effect of this noise is usually to reduce the deadzone 
effectively to D 1 where 


D’ « D - 2n /3 
P 
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where is the peak amplitude of the signal noise. The above approximation 
assumes that the controller (e.g*, pulse modulator) has been designed prop* 
erly, so as to avoid multiple firings at the edge of the deadzone. Thus, the 
symmetric limit-cycle duty cycle is better represented by 

V S LC = A ® /4D ' 


and D' reduces to D as n -* 0. 

P 

However, Yg LC is too conservative an estimate of the firing duty- 
cycle, because the spacecraft is usually not in a symmetric limit cycle. In 
fact, generally the duty cycle y is lower than Y SLC . If the rate from 9 = -D 

to 0 = +D is denoted by 0 + > 0, and the rate from 0 = +D to 0 = -D is denoted 
by 0 <0, then 


A0 = 0 + - 0 

and the limit cycle period P is given by 

P = 2D' A0/0 + (A0 - 0 ) 

This reduces to P SLC when 0 + = A0/2. Thus, the firing duty cycle is 

y = 2/P = 0 (A0 - 0 ) /D 1 A0 

T T 

Now 0 + may have any value between 0 and A0, and all values in this range 
are equally probable. In fact, in the presence of an arbitrarily small dis- 
turbance torque, 0 + will actually slowly range through this region at a rate 
proportional to the (small) disturbance torque. Thus, the average firing 
duty cycle y can be computed from 
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A0 

2v slc 

5 

Thus, the average limit-cycle firing duty cycle is 2 / i of the symmetric 
limit-cycle firing duty cycle. 

Since each firing represents the angular impulse consumption AH of 


AH = I A0 (N-m-sec) 

limit-cycle angular impulse consumption for a spacecraft lifetime t is 

!_/ 

Y tj^ (N-m-sec) 

Dividing by the effective lever arm 1 yields the linear impulse consumption 

Y AHt 

7 (N-sec) 


and dividing by the propellant Specific impulse I g yields the propellant 
limit-cycle weight consumption W T given by 

Li 


W 


LC 


YAHt L 
f I 


sp 


(kg) 
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Substituting the expressions 


_ 2 A6 

y ~ 3 ‘ 4D' 

AH = I A0 

the propellant consumption (per control axis) is 

I(A9) 2 t T 

lc Til Tv 

sp 

(^) Disturbance Torque Propellant Consumption 

For any coasting flight disturbance torque, the propellant weight 

consumption, during the life of the spacecraft, t^, can be conservatively 

estimated from 

T t 

„r D L 

w d - 7i — {kg) 

sp 

The environmental disturbance torques which need to be considered 
for an earth satellite are: 

(a) Orbit rate and gravity gradient 

(b) Magnetic 

(c) Aerodynamic 

(d) Solar. 

The effects of micro-meteorite impact are generally negligible; the effects 
of internal motion (e.g. , antenna slewing and crew movement) will be 
neglected, since there is no internal motion in an Agena-type spacecraft. 

The disturbance torque during powered flight will be considered in 
Section D. 2. c. 
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(3) Disturbance Torque Descriptions 
(a) Orbit Rate and Gravity Gradient 

For a circular orbit with orbit rate oig, there is a disturbance 
torque due to orbit rate and the earth's gravity gradient, if the spacecraft 
is pointing with roll, pitch, and yaw offset angles 0 q, and 4 *q, respec- 

tively. The disturbance torques, about the roll, pitch, and yaw axes T , 
T , and T^, respectively, are approximately given by 


T 

x 



0 


0 


T 

y 


" G y U 0 


T 

2 


-G 

z 




0 


4^ (I 

0 y 


V 


G 


’“O (I * - V 


<**5 (I - I ) 

y x 


0 


and where 1^, 1 , are the roll, pitch, and yaw principal morrfents of 
inertia. Note that even if the spacecraft geometric axes are pointing exactly 
at nadir, the orbit rate and gravity gradient disturbance torques still are 
non-zero if the principal axes of inertia are misaligned from the geometric 
axes by p 0> 0 Q , and 

^ . 2 

For a circular orbit, is given by 




2 

0 



/ r 


3 

0 


where G^, is the earth's gravitational constant 
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G e * 4X 10 14 m 3 /sec 2 (1.41 X 10 16 ft 3 /sec 2 ) 

and r*Q is the spacecraft orbital radius* If is the spacecraft orbital alti- 
tude, then 


where is the radius of the earth 

R e W 6. 37 X 10 6 m (2.09 X 10 7 ft). 

(b) Magnetic Disturbance Torque 

The peak magnetic disturbance torque is given by 

T = mB 


where m is the spacecraft magnetic moment and B is the earth's magnetic 
field at the spacecraft. The spacecraft's magnetic moment is usually esti- 
mated as that due to an equivalent current i , circulating about an equiva- 
lent area A : 

eq 

2 

m = *eq A eq (amp-turn-m ) 

The magnitude of the earth's magnetic field is approximately that of ideal 
dipole, whose peak value is 

^peak " m E^ r 0 


D-17 



where r Q is the spacecraft orbital radius, and m p is given by 


m E ss 8.07X 10 15 (N-m)(m 3 ) /, ?c v <n 16 (ft-lb) (ft 3 ) \ 

(amp-turn-m^) ' (amn-turn-ft 2 W 


(c) Aerodynamic Disturbance Torque 

The peak aerodynamic disturbance torque is approximately given by 


T = d/2)p 0 V^A a < a 


where p Q is the air density at the spacecraft; V is the spacecraft's air 
speed [(1/2) p V a is the dynamic pressure]; is the spacecraft's aero- 
dynamic area in the direction of the air speed (a function of the aerodynamic 
reflectivity); and is the aerodynamic force lever arm (the distance between 
^ ^ ^ spacecraft c c nt 6 r of nriciss and f h p o'm { v /%-c ~ ^ ^ 

— — j **«**.*J-^ Uli. piCiPOUICjo 

Aerodynamic forces and torques are only significant for low-altitude space- 
craft [<1100 km (600 nmi) altitude]; in the region between 185 and 1100 km 
(100 to 600 nmi), the air density is approximately (within 25%) given by 

P 0 = a 0 h 0~ b ° (kg/m 3 ) 


where h Q is the spacecraft altitude in meters, and a Q and b Q are constants: 

a Q ss 1.51 X 10 19 
b Q ss 5. 365. 

The spacecraft air speed is given by the spacecraft orbital speed minus the 
speed of the air. Assuming that the air is "rigidly" attached to the earth, 
the air speed at the spacecraft is 


D-18 



U E r 0 

where is the earth's rotation rate 

-5 

a 7,27 X 10 rad/sec. 
The spacecraft orbital speed is 


w 0 r o 


Thus, the spacecraft's air speed is 


V a " <“(> - V r 0 


V a "o r 0 for "0 » "E 


(d) Solar Disturbance Torque 

The peak solar disturbance torque is approximately given by 


T = P S A S £ S 


where Pg is the solar pressure constant 

P g « 4. 8 X 10~ 6 N/m 2 (10~ 7 lb/ft 2 ) 

Ag is the solar force area of the spacecraft {a function of the solar reflec 
tivity), and Jfg is the solar force lever arm. 

Solar forces and torques are independent of spacecraft altitude, 
since the distance to the sun is essentially constant for an earth satellite. 
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However, the solar torques are usually only significant when the other 
disturbance torques are small (i.e., for high altitude spacecraft). 

c. POWERED FLIGHT 

(1) Disturbance Torque 

There are two cases to be considered: fixed AV engine and gimbaled 
AV engine. Large-thrust engines used for orbit-to-orbit transfer are gim- 
baled in pitch and yaw to provide the required pitch and yaw control torques, 
leaving only roll axis control propellant consumption to be considered. 

Small e r thrusters, used for stationkeeping and docking, for example, are 
usually not gimbaled, and produce disturbance torques on all three control 
axes. The equations for the latter case are easily derived. Taking 
the standard vehicle coordinate system (as shown in Figure D- l) through 
the vehicle center of mass, define (for the nominal thrust along the roll axis): 

x e = distance from center of mass to engine 

6 = engine offset from roll axis in y 

7 

= engine offset from roll axis in z 
6 e ~ pitch angular engine misalignment 
4» = yaw angular engine misalignment 

F = engine thrust. 

The vector expression for torque is 

T = r X F 

where, for our definitions, the components of r and F for small 0 and 

> ® 
lu are 
e 


r ~ (_ V 6 y' 6 z ) 

F = (F, F^, - F0 e ). 
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Evaluating the cross product, we obtain 


Roll: 

T 

= F(- 6 9 


X 

y e 

Pitch: 

T 

= F(fi - x 


y 

Z ' 

Yaw: 

T 

z 

= F(-6 y - : 


The roll torque is a second-order effect and can be neglected. 

For a gimbaled engine, the flight control system points the thrust 
nominally through the center of gravity, reducing the above torques to zero. 
The roll torque must go to zero along with pitch and yaw, as will now be 
shown. For pitch and yaw torques equal to zero, we have 


-6 = x di 

y e r e 

When these expressions are substituted into the equation for roll torque, the 
result is zero. The only sources of roll torque, then, are steering actions 
of the flight control system in pitch and yaw, which couple into roll through 
the engine offsets, and torques from other equipment, such as ullage rocket 
misalignment and turbine exhaust misalignment. The roll torque is not 
negligible because of the large thrust of the main engine. The exact equa- 
tion is dependent on both the vehicle configuration and the powered -flight 
attitude profile, and thus will here be expressed as a general function of the 
pertinent variables: 

T x “ 6 Z > pitch profile, yaw profile, ullage engine mis- 

alignment, turbine exhaust misalignment l 


D-21 



are 


The expressions for fuel consumption due to the disturbance torques 


Roll: 


Pitch: 


Yaw: 


W 


T t 
= - * -P 

P f I 
r x x sp 


T t 

W = 7 -^ 
p £ I 
y y s P 


t t 

w 

p, i- i- 


z sp 


where 

i = roll control moment arm 

i = pitch control moment arm 

£ - yaw control moment arm 

z 

t - time of powered flight 
H 

I - specific impulse. 

(2) AV Fuel Consumption 

We will here determine the AV to deliver a payload from a low 
earth orbit to a synchronous earth orbit and return. The following is an 
analysis to determine the amount of fuel required to perform such a mis- 
sion. The mass of fuel required for a powered -vehicle flight can be deter- 
mined by the following expression: 


m P = m v O x P( AV /I c J - 1] 


sp 


where 


AV - required velocity change as determined by the mission 
f g p = specific impulse of propellant (N-sec/kg) 
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nriy - mass of vehicle without fuel 
mp = mass of fuel. 

The required velocity change AV can be computed in terms of the orbital 
parameters 


AV = V - V 
* 1 H t V LEO 


AV 2 V SEO ' V H- 


AV = ZfAVj + AV 2 ) 


where 


V H ~ velocit Y for injection into Hohmann transfer ellipse 

V„ = velocity for injection into synchronous orbit 
rt 2 

^LEO = velocity in low-earth orbit 
Vgpo = velocity in synchronous earth orbit 


LEO 


GM/a 


LEO 


V SEO " GM/a SEO 


7 

= GMj 

f 2 

. JLl 

H i 

^ a LEO 

V 

7 

= GM \ 

f 2 

_n 

H 2 

* a SEO 

a H 



and where 


G = universal gravitational constant 
M = mass of earth 


a LEO = sem i~ ma j° r ^-xis of low earth orbit 
a SEO = semi -major axis of synchronous earth orbit 
a H ” sem ^" ma j° r 3 .xis of Hohmann orbit. 
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The tankage volume, mass, and radius can be estimated by the following 
relationships: 


V F = m F /p F 
„ 2 

m T = P T r t 


r 



where 

Vp = volume of fuel 
pp = density of fuel 
nip = mass of fuel 

r = radius of a spherical tank 
t - thickness of tank 
P-p “ density of tank structural material 
m^, = mass of fuel tanks. 

3 - SAFETY AGGREGATE EQUATIONS 

a. FAILURE RATE 

The failure rate for each module in the system will be determined by 


1 


n 


= E 

3 = 1 


k. fd. + (1 
J J Ji 


d.) q. 
J J 


Ji 


where 

j = jth part of the n parts contained in module i 
kj = environmental stress factor associated with the jth part 
d j = duty cycle factor associated with the jth part, and 0 < d. < 1 
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\ji - failure rate of the jth part in module i, assumed constant 
for a given mode of operation 

= dormanc y factor (the ratio of the failure rate in a dormant 
mode to that in an active mode) for the jth part, and 

” S V' 

This expression assumes that all parts in module i are essential for its func- 
tion, which is a conservative approach. 

The environmental stress factor k will be a function of the mission 
profile; it will be high during high stress (boost, kick) and low during low 
stress periods (coast). 

The probability of successful module performance (module relia- 
bility) during a time interval (t^, t^) is assumed to be exponential, and 
given by 

R i (t a' t b ) = ex P[' ^i (t b " t a ) ] 

for the ith module. 

The total mission time interval (0, t) consists of a collection of 
subintervals (0, t^), (t^, t^) , ( 1 2 , t^), etc,, each with a different environ- 
ment, stress, or duty cycle profile. Therefore, the mission reliability 
for the ith module, i.e, , the probability of the ith module's surviving a 
mission of length t, is 


where 


t 


t m+l * 


m 


R i (ti = n r ; <v w 

k=0 


Using the reliability functions for individual modules, one can con- 
struct a total system reliability function Rg by considering modular redun- 
dancy within the system. This function R g has been constructed for the three 
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ACS configurations being considered; these expressions are shown in 
subsequent paragraphs. The reliability function R g is really R g (t) and will 
var y only due to t but due to variations in mission environments and 
usages in the subintervals (t^, t^ + ^). 

Using the mathematical expression for R g (t), one can calculate the 
probability of system survival at the end of a given subinterval, assuming 
that the system was operable at the beginning of that subinterval. The prob- 
ability of successful system operation over the entire mission is then the 
product of the subinterval survival probabilities. 

The reliability functions derived in the following paragraphs are 
for individual subintervals. 

The base failure rates can be derived from appropriate orbital 
experience with parts that are screened and burned in at specified levels. 
Adequate derating and thermal control must be employed. Environmental 
k-factors can be taken from MIL-HDBK-2 17A(Ref. 1)/RADC Reliability NTBK 
(Ref. 2 ) and allied sources s Th^ rln firiannir /n I e- \ tt»iH n a J 

- - — — ~ ~ J -- V-*. -w « w J. w ^ ^ f v v i, j. j- wv uaocu 

the following philosophy: 

a. q is high (~1.0) for high reliability, low stress parts. 

b. q is medium for MIL parts. 

c. q is low (~0. 1) for high stress parts or parts without 
extensive history, 

(1 ) Single -String ACS 

The reliability model for a single - string ACS is sketched in 
Figure D-2. 

The system failure rate is the sum of the individual module failure 
rates. The system reliability R g (t) is given by 

Rg(t) = exp (-\ a t) 

It is evident that successful ACS operation requires successful 
function of each module; i. e. , there is no redundancy, and each module 
constitutes a single point failure hazard. 
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Figure D-2. Reliability Model for Single -String ACS 




(2) Active ACS, with Switched Standby ACS 

The reliability model for one active ACS and one standby ACS is 
shown in Figure D-3. This model assumes that all necessary monitoring is 
performed. The failure rate of the ith model in this standby string, while in 
the dormant mode, is given by 


n 

J = E k. q. X... 
1 M 33 31 


The probability of the standby string not failing in the time interval 
(0, t), while in a dormant state, is given by 


R ACS <t) = exp(>x' a t) 

To assess the effect of the redundancy on overall ACS reliability, 
one must include the switch as shown, by failure modes. ISFote that this is 
a generalized switching mechanism; it may actually consist of many sole- 
noids, valves, relays, electrical toggles, etc. 

The probability of the ACS function being performed in the interval 
(0, t) by either the active string or the backup string [the reliability, Rg(t)] 
is given by 
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Figure D-3, Reliability Model for Active ACS with Switched Standby ACS 
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- rate of switch failures open 

~ rate of switch failures common, i. e. , both ACSs actuated 

= rate of monitor prematurely commanding switch to change 
state 

= rate of switch changing state without command from 
monitor 

= rate of switch failing to actuate on command 

= rate of monitor failing to detect failure of active unit 

“ rate of monitor commanding switching from standby unit 
back to disabled active unit 

= rate of switch changing state to put failed active unit on 
line, without command from monitor 

= X^ as defined above. 


(3) Triply Active ACS with Voting 

A reliability model for the triple ACS with voting is shown in 
Figure D-4. The monitor signal processors are triply redundant (active) 
to reduce the impact of failure there. 

The probability of successful operation Rg for this system is 

given by 


R s (t) = R v (R A R Sp ) J + 3(R A R sp ) 2 (1 - R 


A R SP ) + 3R A R SP^ 


r a r sp>‘ 


or 


Rg(t) = R y [l - (1 - ^ Rgp) 3 ] 
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Figure D-4. Reliability Model for Triple ACS With Voting 




whore 


Ry - probability of successful voter /switch operation 
Ra " probability of successful operation of one ACS 

Rgp = probability of successful operation of one signal 
processor. 

From the expression for it can be seen that only one of the 
three ACS signal processing units is required, plus the voter, for success- 
ful system operation* However, the case of two units up and one down pre- 
sents a problem in implementation; with two inputs, which does the voter 
choose as correct; i. e. , how can it select a failure from two inputs? One 
solution to this problem is the submission to the voter of ''derived data from 
the Data Management System (DMS). This data is generated by the DMS 
from previous ACS outputs known to be valid. Its accuracy is lacking, but 
its presence permits the voter to detect gross anomalies in the output of one 
of two ACS/SP units. The reliability of this derived data is not included in 
the following calculations, but its availability is assumed. 

In accordance with the assumptions, 

R s (t) = exp( - \ y t) [i - jl - exp[-<\ a + \ sp )t]| 3 j 

The voter/switch constitutes a single point failure in the ACS; i.e>, 
a failure in the voter /switch will result in loss of the ACS function entirely. 
In this regard, the reliability of this triple redundancy with voting scheme 
is an improvement over the reliability of the single-string ACS only if 

R s > r a 

or 


Ry > 





3r a r sp + * R 


A R SP ) 
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If R SP and R ACS are nearl y one — i - e. , if R^ = Rg p = 1 - e for € small, 

(for example, less than 0.1)— then the above implies that 

R V > [( J - e) (1 + 2« + 3e 2 - 4e 3 + e 4 )j > (1 - «) 2 « R A Rg p • 

Then, Rg > R^ implies R^ > (R^ X Rg p ), which, in view of the probable 
eqiiipment complexities , is certainly feasible. If this condition is met, then 
the triply redundant system with voting is more reliable than a single-string 
ACS, in spite of the single point failure represented by the voter /switch. 

b. FAILURE DETECTION PROBABILITY 

The probability, Pj_j, of detection of a system or module failure, which 
is the probability of detection of an out-of-specification condition of any 
functional parameter, is determined as 

P D _* P(X) F(M) 

where 

P(X) - Probability that the out-of-specification parameter 
was monitored by the failure detection system sub- 
sequent to the failure. 

P(M) = probability that the monitoring system is functioning 
properly at the time of the failure. 

The concept is shown in Figure D-5. 

P(X) is determined by system design, P(X) may be represented 
as (See Figure D-6) 

ppjfj _ number of failures detectable by moni toring system 

total number of failures 

In actuality, parameters are monitored and not failures directly. It 
was judged that P(X) should be expressed as a function of parameters rather 
than failures, since this information would be available earlier in the system 
design process. Under the assumptions that the equipment represented by 
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FAILURE DETECTION PROBABILITY 

• ON-BOARD CHECKOUT SYSTEM 

• CHECK TO SEE WHAT EQUIPMENT IS BEING USED TO 

MEET PERFORMANCE AND FAILURE RATE REQUIRE- 
MENTS (via Table 1-1) 

K 

• TOTAL FAILURES = £ N, M. = TF 

i-l 1 1 


WHERE Nj = TOTAL NUMBER OF PARTS OF TYPE i 


1 = 1, SENSOR 
= 2, ACTUATOR, etc. 

Mj = PART TOLERANCE -1 


• COMPUTE DF (total failures that must be detected) = TF.p 
WHERE p = FAILURE DETECTION PROBABILITY 

• ASSUME IT TAKES ”10" COMPUTER OPERATIONS TO 

DETECT ONE FAILURE 

• TOTAL NUMBER OF COMPUTER OPERATIONS 

NEEDED = 10 DF 

K 

• TOTAL NUMBER OF LEVELS = T M. 

1 = 1 1 


* K 

• 2 X = £ M,, SOLVE FOR x 
i = 1 ' 


Figure D-6. Alternate Failure Detection Aggregate Equations 
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each functional parameter has equal likelihood of failure, and that only one 
functional parameter is affected by any single failure, the following approx- 
imation may be made 

s number of parameters monitored 
total number of functional parameters 

P(M) is the reliability of the monitoring system. In general, there 
will be more than one monitoring subsystem, each designed to monitor 
different parameters (e. g. , voltage, pressure, temperature). P(M X ) is the 
reliability of that portion of the monitoring system that monitors a given 
parameter X. All monitoring subsystems are required to function to max- 
imize failure detection probability. Then, as in Figure D-5 


P(M X 



(t) = exp (-\ 



and 


s 


r m<*> = jl R 

A. — 1 


M 


(t) 



where 


" fail u re r ate of that portion of the monitoring system 
X assigned to parameter X, one of n parameters monitored 

= reliability (probability of successful operation to time t) 
of the entire monitoring system. 

Then, the probability of detection P D (t) of any failure in the system to time t 
is given by 


n 


D (t) = N ex P h E t 
\ X=i v j 


where N is the total number of functional parameters. 
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A reliability diagram for this system is shown in Figure D-7. 

( 1 ) Single -String ACS 

The reliability model of Figure D-7 is applicable to the series case. 
The expression for the failure detection probability is 


P D (t) = W eXp 




as before. 

(2 ) Active ACS, with Switched Standby ACS 

The reliability model for this case is shown in Figure D-8, The 
expression for the failure detection probability is 

t-> _TN(n + n 1 ) * nn’~] / n ^ % A 

P D ( ‘)-[ ^ 

where n r is the number of monitored parameters on the backup ACS while it 
is in the standby mode. There may be less than (n + n') terms on the right- 
hand side of this expression, if the monitor subsystem is time-shared 
between the active and standby systems. 

(3) Triply Active ACS with Voting 

The reliability model for this case is shown in Figure D-9. The 
expression for the failure detection probability is given by 

P D (t) = f^ ex P[- (X v " X sH] 

where (\ v - \ s ) is the failure rate of the voter only, excluding the switch. 
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Figure D-7. Reliability Model of Failure Detection System 
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Figure D-8. Reliability Model for Active ACS with Switched Standby ACS 
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Figure D-9. Reliability Model for Triply Active ACS With 
Voting 






c. FALSE ALARM RATE 

The false alarm rate refers to the frequency of failures 

(1) in the sensor /signal processor, which make up the monitoring 
subsystem, resulting in a command to the switch to change 
state 

(2) in the system selection switch, which results in a state change 
without a command. 

The result of such a failure, in either mode (1) or (2), is that an 
active, properly functioning ACS is switched off-line. (In the single-string 
case, no switching would be done, but erroneous status reports would go to 
the DMS and the user; sacrifice of mission objectives would result'.) If ACS 
redundancy is still available, then this situation will not degrade perform- 
ance immediately, but will likely result in a shortened mission duration. 
However, if ACS redundancy has been invalidated through previous failures, 
this inadvertant switching will degrade mission performance. In this latter 
case, the use of a "locked in" switch is to be recommended, i. e. , a switch 
that cannot change state if no redundancy is present. 

This approach does not consider false alarms resulting from a 
spurious output of the ACS into the monitoring system, such as an out-of- 
specification electrical spike caused by noise. Here, only hard failures of 
the monitor or switching subsystems are considered. 

(1) Single-String ACS 

The reliability model of Figure D-2 is applicable, and the proba- 
bility of false alarm, P is given by 

P p (t) = 1 - exp(-\ m t) 

F 

where ^-m * s that portion of the monitoring system failure rate that is 
linked to a false alarm condition, specifically, that portion associated with 
a false status signal of failure being issued to the DMS. 
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(2) Active ACS with Switched Standby ACS 


The reliability model of Figure D-10 is applicable- The probability 
of a false alarm is given by 

P (t) = 1 - exp[-(\ rn + \ g )t] 

F F 

where \ s is the portion of the switch failure rate that is linked to a change 
F 

of state without a command from the monitor subsystem. 

(3) Triple-Active ACS With Voting 

The reliability model of Figure D-ll is applicable. The probability 
of false alarm is given by 

P (t) - 1 - exp[-(3\ + X )t] 

r f F 


where X S p is the portion of the signal processor failure rate that is asso- 
r F 

dated with a false indication of failure in one of the three ACSs, and \ v is 

F 

the portion of the voter failure rate that results in the censoring of one or 
more ACS inputs when the inputs are, in fact, acceptable. 
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Figure D-ll. Reliability Model for Triply Active ACS With Voting 
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